CVE-2026-0958Patch(gitlab / gitlab)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch gitlab gitlab systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits.

gitlab CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://about.gitlab.com/releases/2026/02/10/patch-release-gitlab-18-8-4-released/

Other references

Weakness type (CWE)

CWE-436

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

gitlab

Threat summary

Patch or workaround signal is available
4 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked at 2 mentions on most recent observed day (2026-02-16)
4 total mentions across 3 days

Affected systems

Vendors

gitlab

Products

gitlab

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

Patch

250.0%

Disclosure

125.0%

General

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-11	1	Patch1
2026-02-13	1	Disclosure1
2026-02-16	2	General1Patch1

Full discourse4 posts

CERT-PY@CERTpy236d
General
⚠️ Vulnerabilidades en productos GitLab ❗ CVE-2026-0958 ❗ CVE-2025-8099 ❗ CVE-2025-7659 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-gitlab-5/ https://t.co/LNCW2ywzjA
Post summary
The post lists three GitLab CVEs and directs readers to a CERT page for additional information, but it does not provide technical details, exploitation evidence, or patch information.
00001115
6.6K followersView on X
CCB Alert@CCBalert239d
Disclosure
Warning: 5 high resource allocation/XSS in #GitLab #CE/EE CVE-2025-7659, CVE-2025-8099, CVE-2025-14560, CVE-2026-0595 & CVE-2026-0958 CVSS: 8.0-7.3 Network based attackers can inject code to access private repositories and cause denial of service #DoS #Patch
Post summary
The tweet warns of five GitLab CVEs with high CVSS scores, describing them as high resource allocation/XSS vulnerabilities that could let attackers inject code, access private repositories, and trigger denial‑of‑service.
00001234
7.2K followersView on X
CVE@CVEnew241d
Patch
CVE-2026-0958 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an una… https://www.cve.org/CVERecord?id=CVE-2026-0958
Post summary
GitLab has remediated CVE-2026-0958 for several versions of GitLab CE/EE, with a patch available. No PoC, exploit, or active exploitation is reported.
00010162
56.5K followersView on X
CRAC Learning - Tech@cracbot236d
Patch
CVE-2026-0958 (CVSS:7.5, HIGH) is Analyzed. GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 1..https://nvd.nist.gov/vuln/detail/CVE-2026-0958 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
GitLab has issued a remediation for CVE‑2026‑0958, detailing its CVSS rating and the affected releases; no PoC, exploit, or active exploitation is referenced.
0000032
171 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gitlab	gitlab	-	-	-
App	gitlab	gitlab	-	-	-

Explore more

Back to dashboard gitlab CVEs gitlab vulnerabilities

What researchers are saying

CVE-2026-0958

CERT-PY@CERTpyGeneral

The post lists three GitLab CVEs and directs readers to a CERT page for additional information, but it does not provide technical details, exploitation evidence, or patch information.

CCB Alert@CCBalertDisclosure

The tweet warns of five GitLab CVEs with high CVSS scores, describing them as high resource allocation/XSS vulnerabilities that could let attackers inject code, access private repositories, and trigger denial‑of‑service.

CVE@CVEnewPatch

GitLab has remediated CVE-2026-0958 for several versions of GitLab CE/EE, with a patch available. No PoC, exploit, or active exploitation is reported.

CRAC Learning - Tech@cracbotPatch

GitLab has issued a remediation for CVE‑2026‑0958, detailing its CVSS rating and the affected releases; no PoC, exploit, or active exploitation is referenced.