CVE-2026-1662

216.73.216.133

· Published 25/02/2026 21:16 · Modified 25/02/2026 21:16

Labels: CVE-2026-1662 2026-02-25 CVE-2026-1662 CWE-770 [email protected]

Essential information

Published: 25/02/2026 21:16
Modified: 25/02/2026 21:16
Author: —
Creator: —
CVSS: 7.5 HIGH (v3.1)
CISA KEV: No
CWE: —
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS metrics

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticated user to cause Denial of Service by sending specially crafted requests to the Jira events endpoint.

NVD status

Status: Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
gitlab / gitlab ce	`cpe:2.3:a:gitlab:gitlab_ce:<14.4-18.7.5>:::::::*`
gitlab / gitlab ee	`cpe:2.3:a:gitlab:gitlab_ee:<14.4-18.7.5>:::::::*`
gitlab / gitlab ce	`cpe:2.3:a:gitlab:gitlab_ce:<18.8-18.8.5>:::::::*`
gitlab / gitlab ee	`cpe:2.3:a:gitlab:gitlab_ee:<18.8-18.8.5>:::::::*`
gitlab / gitlab ce	`cpe:2.3:a:gitlab:gitlab_ce:<18.9-18.9.1>:::::::*`
gitlab / gitlab ee	`cpe:2.3:a:gitlab:gitlab_ee:<18.9-18.9.1>:::::::*`