GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-08-21 07:04 UTC
  • Importiert: 2026-08-28 09:59 UTC
  • CVSS: 9.4
  • Quelle-ID: thn_global
  • uid_hash: ef03e6240ad8cd96ddfedf18a8820a506e4a55238bb8a02a09fefab07270f69c

Inhalt

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.

The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-19478

CRITICAL

9.4

CRITICAL

9.4

2026-08-17

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews