Skip to content
archivevulnerability · 17 Aug 2026 · 21:03 UTC

CVE-2026-19478: GitLab GraphQL Flaw Exploited

VULNCVE-2026-19478source · THN
HIGHCritical vulnerability — CVSS 9.4
What to do
  • Critical severity — schedule an urgent patch.

last 60 dispatches · spectrum

CVE-2026-19478: GitLab GraphQL Flaw Exploited GitLab has patched CVE-2026-19478 , a critical code injection vulnerability affecting self-managed Community Edition (CE) and Enterprise Edition (EE) instances. …

CVE · detail
grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected