sign in--:--:--UTC

CVE-2026-19478

exploited in the wild☆ pin

CVSS

9.4

Reports

5

First seen

Aug 17, 2026

Last seen

Sep 11, 2026

Affected product

GitLab Community Edition and Enterprise Edition (versions 18.2–19.2)

Associated actors

Clop ×2 MarlboroMan ×1 StopAndProtect campaign operators ×1 UNC5976 ×1 UNC6293 ×1 UNC7005 ×1

Recent reports

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

The Hacker NewsSep 11, 2026 Critical

Weekly Recap: AI-Powered PLC Attacks, GitLab Exploits, Supply Chain Threats

The Hacker NewsAug 24, 2026 High

Check Point Threat Intelligence Report – 24 August 2026

Check Point ResearchAug 24, 2026 Critical

GitLab CVE-2026-19478 Code Injection Under Active Exploitation

The Hacker NewsAug 21, 2026 Critical

Critical GitLab GraphQL Flaw Allows Unauthenticated Remote Project Deletion

The Hacker NewsAug 17, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans