Gemini Labs

8 CVEs in 1 Gemini Labs product, including Site Reviews. Newest: CVE-2026-110366 (2026-10-16). Severity, EPSS and public exploits for each.

Gemini Labs products with known CVEs

ProductCVEs
Site Reviews8
Gemini Labs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-110366Medium5.32026-10-16Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2026-103340Medium5.32026-10-01Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2026-94078High7.12026-09-30Unauthenticated Cross Site Scripting (XSS) in Site Reviews <= 8.3.1 versions.
CVE-2026-73382High7.12026-08-18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews allows Stored XSS.T…
CVE-2026-57318Medium6.52026-06-26Subscriber Sensitive Data Exposure in Site Reviews <= 8.0.11 versions.
CVE-2023-49832Medium5.32024-12-09Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2024-29095Medium5.92024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gemini Labs Site Reviews site-reviews.This issue affects…
CVE-2018-0603Medium6.12018-06-26Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vect…