Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authenticated user to cause Denial of Service by uploading a malicious file and repeatedly querying it through GraphQl.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1387 GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an authen… https://www.cve.org/CVERecord?id=CVE-2026-1387
Post summary
GitLab has issued a patch for CVE-2026-1387 affecting multiple major versions, with no evidence of active exploitation or PoC details.
CVE-2026-1387 Authenticated Denial of Service via Malicious File Upload in GitLa... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1387 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet references CVE‑2026‑1387 as an authenticated denial‑of‑service vulnerability in GitLab triggered by malicious file uploads, and provides a link to a vulnerability detail page and alert subscription.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitlab | gitlab | - | - | - |