Exploit for CVE-2026-19478

cve-id Donate Support the maintenance of this project wit...

CVE-2026-19478

creationtimestamp| type| source ---|---|--- 2026-08-17 21:32:33+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtcno7wuqs2j 2026-08-17 22:00:44+00:00| seen| https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html 2026-08-17 22:07:51+00:00| seen|...

CVE-2026-19478

CVE-2026-19478 is a critical (CVSS 9.4) unauthenticated GraphQL directive vulnerability in GitLab CE/EE allowing remote modification/deletion of public projects and user data. Affected: 18.2–18.11.10, 19.0–19.0.7, 19.1–19.1.5, 19.2–19.2.3. Fixed in 18.11.11, 19.0.8, 19.1.6, 19.2.4. No in-the-wild...