PT-2026-24905 · Gitlab+3 · Gitlab+1

CVE-2026-1182 · Publicado 2026-03-12 · Atualizado 2026-03-14

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 8.14 through 18.7.5 GitLab CE/EE versions 18.8 through 18.8.5 GitLab CE/EE versions 18.9 through 18.9.1

Description GitLab has addressed an issue in GitLab Community Edition (CE) and Enterprise Edition (EE) that could allow an authenticated user to gain unauthorized access to the title of a confidential issue created in public projects under specific conditions. The issue involves improper handling of sensitive information.

Recommendations GitLab versions 8.14 through 18.7.5 should be updated to version 18.7.6 or later. GitLab versions 18.8 through 18.8.5 should be updated to version 18.8.6 or later. GitLab versions 18.9 through 18.9.1 should be updated to version 18.9.2 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-212

Identificadores relacionados

BIT-GITLAB-2026-1182

CVE-2026-1182

Produtos afetados

Gitlab

Gitlab Ce/Ee

Referências · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1182.json · Exploit
• 🔥 https://hackerone.com/reports/3515716 · Exploit
• https://gitlab.com/gitlab-org/gitlab/-/work_items/586613 · Nota
• https://twitter.com/CVEnew/status/2031992348474032433 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2026-1182 · Aviso do Fabricante
• https://twitter.com/CVEarity/status/2032076670623236412 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-1182 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2026-1182 · Nota de Segurança
• https://t.me/cveNotify/155213 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-1182 · Aviso do Fabricante
• https://osv.dev/vulnerability/BIT-gitlab-2026-1182 · Aviso do Fabricante
• https://t.me/CVEtracker/47212 · Publicação no Telegram
• https://t.me/cveNotify/155397 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1182 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-1182 · Nota