CVE-2026-19650-CVE-2026-19478

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

Exploit for CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced cross-operati...

GitLab 18.2 < 18.11.11 / 19.0 < 19.0.8 / 19.1 < 19.1.6 / 19.2 < 19.2.4 (CVE-2026-19478)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allo...

Exploit for CVE-2026-19478

cve-id Donate Support the maintenance of this project wit...

CVE-2026-19478

creationtimestamp| type| source ---|---|--- 2026-08-17 21:32:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtcno7wuqs2j 2026-08-17 22:00:44+00:00| seen| https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html 2026-08-17 22:07:51+00:00| seen|...

CVE-2026-19478

GitLab CE/EE (self-managed) versions 18.2 through 19.2.3 are affected by a critical unauthenticated arbitrary method invocation vulnerability (CVSS 9.4, CWE-94) in the GraphQL API. The root cause is in the @gl_introduced directive's fallback field resolver (future_field_fallback.rb), which calls ...