CVE-2026-8280 — GitLab CE/EE Affecting All Versions From 8.3 Before 18.9.7, Denial of Service

title: CVE-2026-8280 - GitLab Authenticated User Denial of Service via Excessive Memory Consumption
id: scw-2026-05-14-ai-1
status: experimental
level: medium
description: |
  Detects potential exploitation of CVE-2026-8280 by identifying POST requests to GitLab API endpoints related to jobs, which, when combined with specific input, could lead to excessive memory consumption and denial of service. This rule targets the core vulnerability of improper input validation leading to DoS.
author: SCW Feed Engine (AI-generated)
date: 2026-05-14
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-8280/
tags:
  - attack.impact
  - attack.t1499
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/api/v4/jobs/'
      cs-method:
          - 'POST'
      sc-status:
          - '500'
  condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse