Vulnerability (CVE)
GitLab released an out-of-band critical patch on August 17, 2026 for CVE-2026-19478, a GraphQL directive flaw rated CVSS 9.4 that could let an unauthenticated attacker remotely modify or delete public projects and user data on self-managed Community and...
GitLab disclosed CVE-2026-19478, a code injection flaw with a CVSS score of 9.4 that lets an unauthenticated attacker modify or delete publicly accessible GitLab projects and rewrite their data via a GraphQL directive, with fixes in GitLab CE and EE...
U.S. government agencies warned that threat actors are using AI to write exploit scripts against internet-exposed Siemens S7 Series PLCs used in water, energy, and manufacturing, finding targets through legitimate scanning services such as Censys and...
GitLab patched CVE-2026-85706, a CVSS 10.0 path traversal flaw in the repository commits API that lets an unauthenticated user read arbitrary files from the server under certain conditions, with in-the-wild probes observed from 06:00 UTC on September 11,...