SecurityThe Hacker Newsabout 2 hours ago
GitLab CVE-2026-19478 Exploited Days After Disclosure
1 min read
GitLab CVE-2026-19478 (CVSS 9.4) is under active exploitation within days of disclosure, allowing unauthenticated code injection via GraphQL. Patches shipped in versions 19.2.4, 19.1.6, 19.0.8, and 18.11.11. watchTowr reproduced it in minutes and observed attacks on its honeypot network.
Level
Hype check
Tap to vote and see what everyone thinks.
