GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
Linked advisories
Affected vendors and products
More on GitLab
Other advisories
- CriticalCVE-2026-105458GitLab: Mehrere Schwachstellen
- HighCVE-2026-16255Incorrect Authorization in GitLab
- HighCVE-2026-15723Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
- LowCVE-2026-14288Use of Incorrectly-Resolved Name or Reference in GitLab
- MediumCVE-2026-13319Authorization Bypass Through User-Controlled Key in GitLab
- MediumCVE-2026-12664Incorrect Authorization in GitLab
- MediumCVE-2026-112378Use of Less Trusted Source in GitLab
- LowCVE-2026-112326Improper Cleanup on Thrown Exception in GitLab
Other news entries
- Cisco-Firewalls und GitLab-Lücke werden angegriffenNewsheise Security
- Hinter kritischen GitLab-Lücken stecken Fehler in der Regex-Engine von RubyNewsheise Security
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left OpenNewsThe Hacker News
- GitLab: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE FlawsNewsThe Hacker News
- Schadcode-Attacken möglich: 12 Jahre alte Lücke gefährdet Gitlab-ServerNewsGolem.de — Security
- GitLab critical patches include one for a bug that allows code execution by unauthenticated usersNewsCSO Online
Source: https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html
ID