# GitLab in September 2026: incidents, uptime and changes

> GitLab in September 2026: 11 incidents on its status page (7 major or critical), 94.22% free of major or critical incidents (vendor-reported), 28 CVEs. From Rewindex’s archive of GitLab’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/gitlab/2026/09
Last updated: 2026-10-31T00:16:51Z

- Incidents posted: 11 (major/critical: 7) · Maintenance: 0
- By vendor impact label: critical 1, major 6, minor 3, none 1
- Uptime (vendor-reported): 94.22% free of major/critical incidents, 90.34% free of any incident; outage time 41 h 33 min, incident time 2.9 days
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 28
- Previous month: [August 2026](https://rewindex.com/company/gitlab/2026/08.md) · Next: [October 2026](https://rewindex.com/company/gitlab/2026/10.md) · [All months](https://rewindex.com/company/gitlab/reports.md) · [GitLab](https://rewindex.com/company/gitlab.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [503s on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ab5ac13c927d205640922b7.md) | critical | 2026-09-24 23:02 UTC | 2026-09-25 04:37 UTC | 5.6 h | resolved |
| [Investigating delayed CI job pickup](https://rewindex.com/company/gitlab/incidents/6a980e679dcc14478b612ca8.md) | major | 2026-09-02 11:54 UTC | 2026-09-02 12:43 UTC | 49 min | resolved |
| [Some catalog agents are not working](https://rewindex.com/company/gitlab/incidents/6a9fcd469dcc14478b612ead.md) | major | 2026-09-08 08:54 UTC | 2026-09-08 09:57 UTC | 1.1 h | resolved |
| [Security Policy Evaluation delays affecting MR approvals](https://rewindex.com/company/gitlab/incidents/6aa2cbbbf6933c04d812dea8.md) | major | 2026-09-10 15:24 UTC | 2026-09-10 20:10 UTC | 4.8 h | resolved |
| [Errors Opening Repositories](https://rewindex.com/company/gitlab/incidents/6aac512ac927d20564091f33.md) | major | 2026-09-17 20:44 UTC | 2026-09-18 13:45 UTC | 17 h | resolved |
| [500 errors while accessing projects](https://rewindex.com/company/gitlab/incidents/6ab52a27c927d20564092275.md) | major | 2026-09-24 13:48 UTC | 2026-09-24 20:50 UTC | 7.0 h | resolved |
| [Security Reports not loading for some users](https://rewindex.com/company/gitlab/incidents/6ab6bfe1c927d20564092312.md) | major | 2026-09-25 18:39 UTC | 2026-09-25 23:56 UTC | 5.3 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Investigating delayed CI job pickup](https://rewindex.com/company/gitlab/incidents/6a980e679dcc14478b612ca8.md) | major | 2026-09-02 11:54 UTC | 2026-09-02 12:43 UTC | 49 min | resolved |
| [Some catalog agents are not working](https://rewindex.com/company/gitlab/incidents/6a9fcd469dcc14478b612ead.md) | major | 2026-09-08 08:54 UTC | 2026-09-08 09:57 UTC | 1.1 h | resolved |
| [Delay in CI job processing](https://rewindex.com/company/gitlab/incidents/6aa18a38cfac4447738b3906.md) | minor | 2026-09-09 16:32 UTC | 2026-09-09 18:12 UTC | 1.7 h | resolved |
| [Security Policy Evaluation delays affecting MR approvals](https://rewindex.com/company/gitlab/incidents/6aa2cbbbf6933c04d812dea8.md) | major | 2026-09-10 15:24 UTC | 2026-09-10 20:10 UTC | 4.8 h | resolved |
| [Artifact upload failures and timeouts](https://rewindex.com/company/gitlab/incidents/6aa3969396d41a47784d9c6e.md) | none | 2026-09-11 05:50 UTC | 2026-09-11 19:22 UTC | 14 h | resolved |
| [Errors Opening Repositories](https://rewindex.com/company/gitlab/incidents/6aac512ac927d20564091f33.md) | major | 2026-09-17 20:44 UTC | 2026-09-18 13:45 UTC | 17 h | resolved |
| [Performance degradation in APAC/Singapore](https://rewindex.com/company/gitlab/incidents/6ab11e9fd88a450599f662ba.md) | minor | 2026-09-21 12:10 UTC | 2026-09-21 20:18 UTC | 8.1 h | resolved |
| [500 errors while accessing projects](https://rewindex.com/company/gitlab/incidents/6ab52a27c927d20564092275.md) | major | 2026-09-24 13:48 UTC | 2026-09-24 20:50 UTC | 7.0 h | resolved |
| [503s on GitLab.com](https://rewindex.com/company/gitlab/incidents/6ab5ac13c927d205640922b7.md) | critical | 2026-09-24 23:02 UTC | 2026-09-25 04:37 UTC | 5.6 h | resolved |
| [Security Reports not loading for some users](https://rewindex.com/company/gitlab/incidents/6ab6bfe1c927d20564092312.md) | major | 2026-09-25 18:39 UTC | 2026-09-25 23:56 UTC | 5.3 h | resolved |
| [Security Reports not loading for some users](https://rewindex.com/company/gitlab/incidents/6abc00572dc48705ab3d9b62.md) | minor | 2026-09-29 18:15 UTC | 2026-09-30 12:26 UTC | 18 h | resolved |

## CVEs published

- [CVE-2026-87719](https://rewindex.com/cve/CVE-2026-87719.md) Deserialization of Untrusted Data in GitLab (CVSS 9.9), published 2026-09-12
- [CVE-2026-85706](https://rewindex.com/cve/CVE-2026-85706.md) Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (CVSS 10.0, CISA KEV), published 2026-09-12
- [CVE-2026-88765](https://rewindex.com/cve/CVE-2026-88765.md) Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab (CVSS 8.5), published 2026-09-15
- [CVE-2026-82837](https://rewindex.com/cve/CVE-2026-82837.md) Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 5.3), published 2026-09-15
- [CVE-2026-13210](https://rewindex.com/cve/CVE-2026-13210.md) Incorrect Authorization in GitLab (CVSS 7.7), published 2026-09-15
- [CVE-2026-12910](https://rewindex.com/cve/CVE-2026-12910.md) Missing Authentication for Critical Function in GitLab (CVSS 5.4), published 2026-09-15
- [CVE-2026-79708](https://rewindex.com/cve/CVE-2026-79708.md) Incorrect Authorization in GitLab (CVSS 8.5), published 2026-09-16
- [CVE-2026-78252](https://rewindex.com/cve/CVE-2026-78252.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.2), published 2026-09-16
- [CVE-2026-19619](https://rewindex.com/cve/CVE-2026-19619.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 4.7), published 2026-09-16
- [CVE-2026-16794](https://rewindex.com/cve/CVE-2026-16794.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-09-16
- [CVE-2026-8030](https://rewindex.com/cve/CVE-2026-8030.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-09-16
- [CVE-2026-7514](https://rewindex.com/cve/CVE-2026-7514.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-09-16
- [CVE-2026-3855](https://rewindex.com/cve/CVE-2026-3855.md) Improper Control of Resource Identifiers ('Resource Injection') in GitLab (CVSS 3.1), published 2026-09-16
- [CVE-2026-1168](https://rewindex.com/cve/CVE-2026-1168.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2026-09-16
- [CVE-2025-14871](https://rewindex.com/cve/CVE-2025-14871.md) Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5), published 2026-09-16
- [CVE-2024-11222](https://rewindex.com/cve/CVE-2024-11222.md) Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab (CVSS 6.4), published 2026-09-16
- [CVE-2026-86341](https://rewindex.com/cve/CVE-2026-86341.md) Access Control Check Implemented After Asset is Accessed in GitLab (CVSS 4.4), published 2026-09-16
- [CVE-2026-93577](https://rewindex.com/cve/CVE-2026-93577.md) Integer Overflow or Wraparound in GitLab (CVSS 9.9), published 2026-09-23
- [CVE-2026-92628](https://rewindex.com/cve/CVE-2026-92628.md) Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in GitLab (CVSS 3.1), published 2026-09-23
- [CVE-2026-92874](https://rewindex.com/cve/CVE-2026-92874.md) Incorrect Authorization in GitLab (CVSS 5.4), published 2026-09-23
- [CVE-2026-92529](https://rewindex.com/cve/CVE-2026-92529.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-09-23
- [CVE-2026-92470](https://rewindex.com/cve/CVE-2026-92470.md) Missing Authorization in GitLab (CVSS 7.7), published 2026-09-23
- [CVE-2026-92530](https://rewindex.com/cve/CVE-2026-92530.md) Use of Less Trusted Source in GitLab (CVSS 4.3), published 2026-09-23
- [CVE-2026-89078](https://rewindex.com/cve/CVE-2026-89078.md) Double Free in GitLab (CVSS 9.9), published 2026-09-23
- [CVE-2026-84739](https://rewindex.com/cve/CVE-2026-84739.md) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (CVSS 8.7), published 2026-09-29
- [CVE-2026-10518](https://rewindex.com/cve/CVE-2026-10518.md) Incorrect Authorization in GitLab (CVSS 4.3), published 2026-09-29
- [CVE-2026-8937](https://rewindex.com/cve/CVE-2026-8937.md) Missing Authorization in GitLab (CVSS 4.3), published 2026-09-29
- [CVE-2026-4523](https://rewindex.com/cve/CVE-2026-4523.md) Missing Authorization in GitLab (CVSS 3.7), published 2026-09-29

## Cite this

GitLab posted 11 status incidents in September 2026 (7 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/gitlab/2026/09
- Citation: GitLab, “GitLab in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/gitlab/2026/09 (CC BY 4.0).
- Markdown link: `[GitLab: GitLab in September 2026 (2026-09-01)](https://rewindex.com/company/gitlab/2026/09)`


---
Canonical: https://rewindex.com/company/gitlab/2026/09 · Markdown: https://rewindex.com/company/gitlab/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:54:10.077Z