PT-2026-40857 · Gitlab · Gitlab Ce/Ee

CVE-2026-1184 · Published 2026-05-14 · Updated 2026-05-18

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GitLab EE versions 11.9 through 18.9.6 GitLab EE versions 18.10 through 18.10.5 GitLab EE versions 18.11 through 18.11.2

Description Improper validation allows an unauthenticated user to cause a denial of service by uploading a specially crafted file.

Recommendations Update to version 18.9.7 Update to version 18.10.6 Update to version 18.11.3

Exploit

Fix

DoS

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2026-07011

BIT-GITLAB-2026-1184

CVE-2026-1184

Affected Products

Gitlab Ce/Ee

References · 10

• 🔥 https://hackerone.com/reports/3515842 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1184 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-gitlab-2026-1184 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1184 · Security Note
• https://ubuntu.com/security/CVE-2026-1184 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07011 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-1184 · Security Note
• https://t.me/cveNotify/163739 · Telegram Post
• https://about.gitlab.com/releases/2026/05/13/patch-release-gitlab-18-11-3-released · Note
• https://gitlab.com/gitlab-org/gitlab/-/work_items/586634 · Note