Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-17 21:03 UTC
  • Importiert: 2026-08-24 22:52 UTC
  • CVSS: 9.4
  • Quelle-ID: thn_global
  • uid_hash: 7050ccafb72d5ffd8359e7cdef8d7f4ce1f41ec9c337c14ec90407e6163acfff
The Hacker News

Inhalt

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data.

The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4.

Released on

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-19478

CRITICAL

9.4

CRITICAL

9.4

2026-08-17

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

 security_news - de https://feeds.feedburner.com/TheHackersNews
Zurueck zur Eintrags-Liste