Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause regular expression denial of service by sending specially crafted input to a merge request endpoint under certain conditions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-1388 Regular Expression Denial of Service in GitLab CE/EE Merge Request Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1388
Post summary
A new CVE-2026-1388 describes a regex-based DoS vulnerability in GitLab's merge request endpoint, with no PoC, exploit, or patch details provided.
CVE-2026-1388 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unau… https://www.cve.org/CVERecord?id=CVE-2026-1388
Post summary
GitLab has released a patch for CVE-2026-1388 affecting multiple versions; no exploitation or PoC details are provided.
⚠️ Vulnerabilidades en productos GitLab ❗ CVE-2026-1662 ❗ CVE-2026-1388 ❗ CVE-2026-0752 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-gitlab-6/ https://t.co/UaucEFJUgl
Post summary
The post lists three GitLab CVEs and links to a source for more information, but offers no further technical or operational details.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitlab | gitlab | - | - | - |
| App | gitlab | gitlab | - | - | - |
| App | gitlab | gitlab | 18.9.0 | - | - |
| App | gitlab | gitlab | 18.9.0 | - | - |