CVE-2026-19650-CVE-2026-19478

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

Exploit for CVE-2026-19478

CVE-2026-19478 — GitLab GraphQL @glintroduced cross-operati...

GitLab 18.2 < 18.11.11 / 19.0 < 19.0.8 / 19.1 < 19.1.6 / 19.2 < 19.2.4 (CVE-2026-19478)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allo...

Exploit for CVE-2026-19478

cve-id Donate Support the maintenance of this project wit...

CVE-2026-19478

creationtimestamp| type| source ---|---|--- 2026-08-17 21:32:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtcno7wuqs2j 2026-08-17 22:00:44+00:00| seen| https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html 2026-08-17 22:07:51+00:00| seen|...

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab has released security updates to address a critical vulnerability impacting its Community Edition CE and Enterprise Edition EE software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as...

CVE-2026-19478

GitLab CE/EE (self-managed) versions 18.2 through 19.2.3 are affected by a critical unauthenticated arbitrary method invocation vulnerability (CVSS 9.4, CWE-94) in the GraphQL API. The root cause is in the @gl_introduced directive's fallback field resolver (future_field_fallback.rb), which calls ...