CompaniesGitLabMonthly reportsSeptember 2026
GitLab in September 2026: incidents, uptime and changes
Vendor-reported outage time 41 h 33 min, incident time 2.9 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 1 · Major 6 · Minor 3 · No impact listed 1
Major and critical incidents 7
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| 503s on GitLab.com | Critical | 5.6 h | resolved | 09-24 | |
| Investigating delayed CI job pickup | Major | 49 min | resolved | 09-02 | |
| Some catalog agents are not working | Major | 1.1 h | resolved | 09-08 | |
| Security Policy Evaluation delays affecting MR approvals | Major | 4.8 h | resolved | 09-10 | |
| Errors Opening Repositories | Major | 17 h | resolved | 09-17 | |
| 500 errors while accessing projects | Major | 7.0 h | resolved | 09-24 | |
| Security Reports not loading for some users | Major | 5.3 h | resolved | 09-25 |
Other incidents 4
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Delay in CI job processing | Minor | 1.7 h | resolved | 09-09 | |
| Artifact upload failures and timeouts | No impact listed | 14 h | resolved | 09-11 | |
| Performance degradation in APAC/Singapore | Minor | 8.1 h | resolved | 09-21 | |
| Security Reports not loading for some users | Minor | 18 h | resolved | 09-29 |
CVEs published
- CVE-2026-87719 Deserialization of Untrusted Data in GitLab (CVSS 9.9)
- CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (CVSS 10.0, CISA KEV)
- CVE-2026-88765 Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 8.5)
- CVE-2026-82837 Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 5.3)
- CVE-2026-13210 Incorrect Authorization in GitLab (CVSS 7.7)
- CVE-2026-12910 Missing Authentication for Critical Function in GitLab (CVSS 5.4)
- CVE-2026-79708 Incorrect Authorization in GitLab (CVSS 8.5)
- CVE-2026-78252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.2)
- CVE-2026-19619 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 4.7)
- CVE-2026-16794 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-8030 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-7514 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-3855 Improper Control of Resource Identifiers ('Resource Injection') in GitLab (CVSS 3.1)
- CVE-2026-1168 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2025-14871 Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5)
- CVE-2024-11222 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 6.4)
- CVE-2026-86341 Access Control Check Implemented After Asset is Accessed in GitLab (CVSS 4.4)
- CVE-2026-93577 Integer Overflow or Wraparound in GitLab (CVSS 9.9)
- CVE-2026-92628 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab (CVSS 3.1)
- CVE-2026-92874 Incorrect Authorization in GitLab (CVSS 5.4)
- CVE-2026-92529 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-92470 Missing Authorization in GitLab (CVSS 7.7)
- CVE-2026-92530 Use of Less Trusted Source in GitLab (CVSS 4.3)
- CVE-2026-89078 Double Free in GitLab (CVSS 9.9)
- CVE-2026-84739 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7)
- CVE-2026-10518 Incorrect Authorization in GitLab (CVSS 4.3)
- CVE-2026-8937 Missing Authorization in GitLab (CVSS 4.3)
- CVE-2026-4523 Missing Authorization in GitLab (CVSS 3.7)
Cite this
GitLab posted 11 status incidents in September 2026 (7 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- GitLab in September 2026
- Vendor
- GitLab
- Date
- URL
- https://rewindex.com/company/gitlab/2026/09