News
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
4 hours from now
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
By info@thehackernews.com (The Hacker News)
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4. Released on
More from The Hacker News
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
2 hours from now
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
1 hour from now
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
1 hour from now
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
3 hours ago
How MCP Servers Can Expose Enterprise Secrets
4 hours ago