<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-18T14:15:02.962900+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d3cf072d-0601-4b4f-9430-e34cec107169/export</id>
    <title>d3cf072d-0601-4b4f-9430-e34cec107169</title>
    <updated>2026-08-18T14:15:02.988750+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d3cf072d-0601-4b4f-9430-e34cec107169/export"/>
    <published>2026-08-18T14:00:03.510900+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57134a7f-5243-4383-8b91-4b8a993f4ceb/export</id>
    <title>57134a7f-5243-4383-8b91-4b8a993f4ceb</title>
    <updated>2026-08-18T14:15:02.991358+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57134a7f-5243-4383-8b91-4b8a993f4ceb/export"/>
    <published>2026-08-18T13:09:03.958496+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cc798fa9-fef6-4c81-a0f3-db031e6022e6/export</id>
    <title>cc798fa9-fef6-4c81-a0f3-db031e6022e6</title>
    <updated>2026-08-18T14:15:02.991454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cc798fa9-fef6-4c81-a0f3-db031e6022e6/export"/>
    <published>2026-08-18T12:18:49.768084+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50d290bd-81df-41e3-90d8-feb5c0efb178/export</id>
    <title>50d290bd-81df-41e3-90d8-feb5c0efb178</title>
    <updated>2026-08-18T14:15:02.991523+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50d290bd-81df-41e3-90d8-feb5c0efb178/export"/>
    <published>2026-08-18T12:15:24.455819+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/80c61fab-b2bd-4ae4-a885-15605f3dd97d/export</id>
    <title>80c61fab-b2bd-4ae4-a885-15605f3dd97d</title>
    <updated>2026-08-18T14:15:02.991598+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/80c61fab-b2bd-4ae4-a885-15605f3dd97d/export"/>
    <published>2026-08-18T12:14:01.027415+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/41c27f4c-729e-4a9e-8a9a-132399dd395f/export</id>
    <title>41c27f4c-729e-4a9e-8a9a-132399dd395f</title>
    <updated>2026-08-18T14:15:02.991669+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access &amp;amp; monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/41c27f4c-729e-4a9e-8a9a-132399dd395f/export"/>
    <published>2026-08-18T12:09:44.383313+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31d642e7-c14c-4866-babe-ca0196b6d8ce/export</id>
    <title>31d642e7-c14c-4866-babe-ca0196b6d8ce</title>
    <updated>2026-08-18T14:15:02.991743+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access &amp;amp; monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31d642e7-c14c-4866-babe-ca0196b6d8ce/export"/>
    <published>2026-08-18T12:09:43.150747+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4/export</id>
    <title>1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4</title>
    <updated>2026-08-18T14:15:02.991803+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-18T12:00:03.184034Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4/export"/>
    <published>2026-08-18T12:00:03.184034+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43d5fc42-3097-4215-82fe-f5f18640c5fa/export</id>
    <title>43d5fc42-3097-4215-82fe-f5f18640c5fa</title>
    <updated>2026-08-18T14:15:02.991862+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43d5fc42-3097-4215-82fe-f5f18640c5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mte5wfnbok2v", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/18/g...\n\n#CVE #vulnerability #cybersecurity", "creation_timestamp": "2026-08-18T11:56:10.158718Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43d5fc42-3097-4215-82fe-f5f18640c5fa/export"/>
    <published>2026-08-18T11:56:10.158718+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/df9bbfc5-0308-4287-9658-6fdb8ca19603/export</id>
    <title>df9bbfc5-0308-4287-9658-6fdb8ca19603</title>
    <updated>2026-08-18T14:15:02.991924+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "df9bbfc5-0308-4287-9658-6fdb8ca19603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mte5dizb2k2e", "content": "GitLab\u306b\u91cd\u5927\u306a\u6b20\u9665\u3001\u653b\u6483\u8005\u304c\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a\u9664\u53ef\u80fd\u306b(CVE-2026-19478)\n\nGitLab\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306a\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u3092\u542b\u3080\u30012\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001GitLab Community Edition(CE)\u304a\u3088\u3073Enterprise Edition(EE)\u306e\u30d0\u30fc\u30b8\u30e7\u30f318.2\u304b\u308918.11....", "creation_timestamp": "2026-08-18T11:45:32.215520Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/df9bbfc5-0308-4287-9658-6fdb8ca19603/export"/>
    <published>2026-08-18T11:45:32.215520+00:00</published>
  </entry>
</feed>
