FR
live
CVE-2026-33824 · Microsoft Internet Key Exchange (IKE) Service Extensions CVE-2026-55040 · Microsoft SharePoint · CVSS 9.1 CVE-2026-59310 · Broadcom VMware vCenter · CVSS 9.8 CVE-2026-65400 · Apple macOS · CVSS 9.8
tag

#code-injection

DevOps

GitLab patches a critical unauthenticated GraphQL code injection flaw (CVSS 9.4)

On August 18, 2026, GitLab released fixes for two vulnerabilities, including a critical code injection via a GraphQL directive (CVE-2026-19478, CVSS 9.4) exploitable remotely without authentication or user interaction, allowing attackers to modify or delete public projects. Every self-managed installation must upgrade immediately — GitLab.com and GitLab Dedicated are already patched.

WE Walid ETTAYEB 20 August 2026 · 6 min

Type at least two characters.

↑ ↓ navigate ↵ open esc dismiss