CVE-2026-12635 | GitLab Community Edition/Enterprise Edition up to 18.11.5/19.0.2/19.1.0 URL Validation dns rebinding

June 25, 2026 Yanac

A vulnerability was found in GitLab Community Edition and Enterprise Edition up to 18.11.5/19.0.2/19.1.0 and classified as problematic. Impacted is an unknown function of the component URL Validation Handler. Such manipulation leads to reliance on reverse dns resolution.

This vulnerability is traded as CVE-2026-12635. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More