OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-1168

HIGH · CVSS 7.5 EPSS 0.49%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

GitLab versions from 18.4.6 to 19.1.8, 19.2 to 19.2.6, and 19.3 to 19.3.2 are vulnerable to a denial of service attack that can be triggered by unauthenticated users exploiting improper resource allocation limits in the GraphQL complexity calculation. This vulnerability could lead to significant service disruptions, making it critical for all GitLab users operating within the specified versions to prioritize immediate updates to mitigate potential risks. Organizations relying on GitLab for their development and deployment processes should address this issue promptly to ensure system stability and security.

CVE
CVE-2026-1168
Severity
HIGH
CVSS
7.5
EPSS
0.49%
GitLab

Original NVD Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL complexity calculation logic.

Related CVEs

Other vulnerabilities affecting the same vendor(s)