sign in--:--:--UTC

CVE-2026-19478

exploited in the wild☆ pin

CVSS

9.4

Reports

2

First seen

Aug 17, 2026

Last seen

Aug 21, 2026

Affected product

GitLab Community Edition and Enterprise Edition (versions 18.2–19.2)

Recent reports

GitLab CVE-2026-19478 Code Injection Under Active Exploitation

The Hacker NewsAug 21, 2026 Critical

Critical GitLab GraphQL Flaw Allows Unauthenticated Remote Project Deletion

The Hacker NewsAug 17, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans