Cyber Resilience

CVE-2025-14869

High

Published: 14 May 2026

Published
14 May 2026
Modified
16 May 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0003 10.7th percentile
Risk Priority 15 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-14869 is a high-severity Improper Validation of Specified Quantity in Input (CWE-1284) vulnerability in Gitlab Gitlab. Its CVSS base score is 7.5 (High).

Operationally, ranked at the 10.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an unauthenticated user to cause denial of service by sending specially crafted payloads on…

more

certain API endpoints.

CWE(s)
CWE-1284

Related Threats

CVEs Like This One

CVE-2025-12664Same product: Gitlab Gitlab
CVE-2025-14511Same product: Gitlab Gitlab
CVE-2026-1092Same product: Gitlab Gitlab
CVE-2025-14513Same product: Gitlab Gitlab
CVE-2024-12380Same product: Gitlab Gitlab
CVE-2026-2745Same product: Gitlab Gitlab
CVE-2026-5816Same product: Gitlab Gitlab
CVE-2026-0723Same product: Gitlab Gitlab
CVE-2026-0752Same product: Gitlab Gitlab
CVE-2025-1257Same product: Gitlab Gitlab

Affected Assets

gitlab
gitlab
18.5.0 — 18.9.7 · 18.5.0 — 18.9.7 · 18.10.0 — 18.10.6

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References