> TritonInfoSec News
Home / Aug 22, 2026 / Story
0
#3 The Hacker News general August 21, 2026 at 07:04 UTC

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

By [email protected] (The Hacker News)

AI Summary

CVE-2026-19478, a CVSS 9.4 unauthenticated code injection vulnerability in GitLab, was exploited in the wild within days of public disclosure, according to watchTowr. The flaw allows attackers to modify or delete publicly accessible GitLab projects and rewrite their data without authentication, posing an immediate risk to organizations running self-hosted GitLab instances.

Read full article → https://thehackernews.com/2026/08/gitlab-cve-2026-…

Relevance score: 89.0/100

# More from August 22

  1. 1
    Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution The Hacker News
  2. 2
    Microsoft warns of max severity Entra ID flaw exploited in attacks BleepingComputer
  3. 4
    Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot The Hacker News
  4. 5
    Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 The Hacker News
  5. 6
    CISA orders feds to patch actively exploited TrueConf Server flaws BleepingComputer
  6. 7
    Hundreds of leaked AWS keys give full control over corporate accounts BleepingComputer
  7. 8
    Rust Supply Chain Attack Linked to North Korean Hackers SecurityWeek
  8. 9
    Critical Zimbra RCE flaw now actively exploited in attacks BleepingComputer
  9. 10
    Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices The Hacker News