GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks able to modify or delete public projects ...
Hackers started exploiting CVE-2026-19478, a critical, unauthenticated GitLab vulnerability, shortly after public disclosure.
A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...
GitLab has patched CVE-2026-19478, a critical code injection vulnerability that can be exploited without authentication.
For the second time in less than a month GitLab has users scrambling to address a critical vulnerability in the community and enterprise editions of its DevOps ...
GitLab has released critical updates to address multiple vulnerabilities, the most severe of them (CVE-2024-6678) allowing an attacker to trigger pipelines as arbitrary users under certain conditions.