GitLab 18.9
Support for GitLab 18.9 ended on 21/05/2026. There are no more security updates for this branch.
Latest version: 18.9.8, released on 25/05/2026
End of support: 21/05/2026
111 known vulnerabilities open in 18.9.8
Vulnerabilities in GitLab 18.9
189 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.
- CVE-2026-85706, CVSS 3.1: 10.0, actively exploited: still open in 18.9.8
- CVE-2026-110264, CVSS 3.1: 10.0: still open in 18.9.8
- CVE-2026-87719, CVSS 3.1: 9.9: still open in 18.9.8
- CVE-2026-19478, CVSS 3.1: 9.1: still open in 18.9.8
- CVE-2026-10053, CVSS 3.1: 8.8: still open in 18.9.8
- CVE-2026-8589, CVSS 3.1: 8.7: still open in 18.9.8
- CVE-2026-84739, CVSS 3.1: 8.7: still open in 18.9.8
- CVE-2026-15217, CVSS 3.1: 8.7: still open in 18.9.8
- CVE-2026-15216, CVSS 3.1: 8.7: still open in 18.9.8
- CVE-2026-10087, CVSS 3.1: 8.7: still open in 18.9.8
- CVE-2026-88765, CVSS 3.1: 8.5: still open in 18.9.8
- CVE-2026-16301, CVSS 3.1: 8.5: still open in 18.9.8
- CVE-2026-12436, CVSS 3.1: 8.4: still open in 18.9.8
- CVE-2026-4868, CVSS 3.1: 8.2: still open in 18.9.8
- CVE-2026-15723, CVSS 3.1: 8.2: still open in 18.9.8
- CVE-2026-14814, CVSS 3.1: 8.2: still open in 18.9.8
- CVE-2026-18252, CVSS 3.1: 8.1: still open in 18.9.8
- CVE-2026-92470, CVSS 3.1: 7.7: still open in 18.9.8
- CVE-2026-81839, CVSS 3.1: 7.7: still open in 18.9.8
- CVE-2026-13210, CVSS 3.1: 7.7: still open in 18.9.8
- CVE-2026-7427, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2026-7250, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2026-15975, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2026-1168, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2026-112212, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2025-14871, CVSS 3.1: 7.5: still open in 18.9.8
- CVE-2026-19650, CVSS 3.1: 7.1: still open in 18.9.8
- CVE-2026-16255, CVSS 3.1: 7.1: still open in 18.9.8
- CVE-2026-3855, CVSS 3.1: 6.8: still open in 18.9.8
- CVE-2026-12664, CVSS 3.1: 6.8: still open in 18.9.8
- CVE-2026-77801, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2026-1500, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2026-1402, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2026-13319, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2026-105777, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2025-10903, CVSS 3.1: 6.5: still open in 18.9.8
- CVE-2024-11222, CVSS 3.1: 6.4: still open in 18.9.8
- CVE-2026-101168, CVSS 3.1: 6.2: still open in 18.9.8
- CVE-2026-78252, CVSS 3.1: 6.1: still open in 18.9.8
- CVE-2026-7767, CVSS 3.1: 5.8: still open in 18.9.8
- CVE-2026-3035, CVSS 3.1: 5.5: still open in 18.9.8
- CVE-2026-92874, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-6896, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-6269, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-5309, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-4398, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-16553, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-13320, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-12910, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-10086, CVSS 3.1: 5.4: still open in 18.9.8
- CVE-2026-84284, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-7492, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-6713, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-6336, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-6267, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-2238, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-16275, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-13113, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-11379, CVSS 3.1: 5.3: still open in 18.9.8
- CVE-2026-14341, CVSS 3.1: 4.9: still open in 18.9.8
- CVE-2026-11827, CVSS 3.1: 4.9: still open in 18.9.8
- CVE-2026-3093, CVSS 3.1: 4.7: still open in 18.9.8
- CVE-2026-100755, CVSS 3.1: 4.6: still open in 18.9.8
- CVE-2026-86341, CVSS 3.1: 4.4: still open in 18.9.8
- CVE-2026-8330, CVSS 3.1: 4.4: still open in 18.9.8
- CVE-2026-9807, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-9694, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-9268, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-8716, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-8667, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-8472, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-82837, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-8030, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-7514, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-6821, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-6567, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-6277, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-5952, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-5796, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-5296, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-4879, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-4672, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-2601, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-18244, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-1606, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-14552, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-14351, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-112378, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-10733, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-10518, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-104661, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2025-12506, CVSS 3.1: 4.3: still open in 18.9.8
- CVE-2026-92528, CVSS 3.1: 4.2: still open in 18.9.8
- CVE-2026-5954, CVSS 3.1: 4.2: still open in 18.9.8
- CVE-2026-0934, CVSS 3.1: 3.8: still open in 18.9.8
- CVE-2026-6976, CVSS 3.1: 3.7: still open in 18.9.8
- CVE-2026-4523, CVSS 3.1: 3.7: still open in 18.9.8
- CVE-2026-7487, CVSS 3.1: 3.5: still open in 18.9.8
- CVE-2026-105711, CVSS 3.1: 3.5: still open in 18.9.8
- CVE-2026-100104, CVSS 3.1: 3.5: still open in 18.9.8
And 89 more.
Get notified
Add GitLab with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add GitLab 18.9