Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy enforcement jobs, due to improper handling of job dependencies.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-15387 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,… https://www.cve.org/CVERecord?id=CVE-2026-15387
Post summary
GitLab notified that CVE-2026-15387 has been remediated, listing affected versions with no mention of a PoC, exploit code, or active attacks.
🚨*CVE* CVE-2026-15387 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,… https://www.cve.org/CVERecord?id=CVE-2026-15387 ----- Traducción: CVE-2026-15387 Git… https://infoflow.cloud`
Post summary
The text reports that GitLab has remediated CVE‑2026‑15387 for specific EE versions, but offers no PoC, exploit code, or detailed technical vuln information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gitlab | gitlab | - | - | - |
| App | gitlab | gitlab | 19.3.0 | - | - |