CVE-2026-159757.5HighCWE-770
GitLab vulnerability
Not in CISA KEVVendor fix available
0.5%probability of exploitation in the next 30 days
43rd percentile
050100
Higher than 43% of scored CVEs
7.5HighCVSS 3.1
LowMediumHighCrit.
DescriptionNVD
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.8 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthenticated user to cause a denial of service due to insufficient resource throttling when processing merge request discussions.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Jul.
- GitLab patches critical flaw CVE-2026-6267 allowing data accessSecurityOnline · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.