https://vulnerability.circl.lu/sightings/feed 2026-08-18T18:38:01.860949+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fe571e12-3663-47bb-b0f0-02d70775bb1f/export 2026-08-18T18:38:01.882426+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "fe571e12-3663-47bb-b0f0-02d70775bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:05.878288Z"} 2026-08-18T16:15:05.878288+00:00 https://vulnerability.circl.lu/sighting/3026cf48-8b90-4d59-8d24-1023395f8d3e/export 2026-08-18T18:38:01.884889+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3026cf48-8b90-4d59-8d24-1023395f8d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-18T16:00:04.270460Z"} 2026-08-18T16:00:04.270460+00:00 https://vulnerability.circl.lu/sighting/ae839074-59c3-424e-8f37-8a8e7a545d89/export 2026-08-18T18:38:01.885896+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ae839074-59c3-424e-8f37-8a8e7a545d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelii7uiq2m", "content": "Emergency patch time if you're managing your own #GitLab instance! Out of band patch was released for CVE-2026-19478 (CVSS=9.4), a code-injection vulnerability in GraphQL directive handling that can be exploited without authentication.\n\nFull advisory: buff.ly/zO3C6Bj \n\n#GitLab #DevSecOps", "creation_timestamp": "2026-08-18T15:58:52.354683Z"} 2026-08-18T15:58:52.354683+00:00 https://vulnerability.circl.lu/sighting/d3cf072d-0601-4b4f-9430-e34cec107169/export 2026-08-18T18:38:01.886021+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"} 2026-08-18T14:00:03.510900+00:00 https://vulnerability.circl.lu/sighting/57134a7f-5243-4383-8b91-4b8a993f4ceb/export 2026-08-18T18:38:01.886126+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"} 2026-08-18T13:09:03.958496+00:00 https://vulnerability.circl.lu/sighting/cc798fa9-fef6-4c81-a0f3-db031e6022e6/export 2026-08-18T18:38:01.886226+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"} 2026-08-18T12:18:49.768084+00:00 https://vulnerability.circl.lu/sighting/50d290bd-81df-41e3-90d8-feb5c0efb178/export 2026-08-18T18:38:01.886325+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"} 2026-08-18T12:15:24.455819+00:00 https://vulnerability.circl.lu/sighting/80c61fab-b2bd-4ae4-a885-15605f3dd97d/export 2026-08-18T18:38:01.886420+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"} 2026-08-18T12:14:01.027415+00:00 https://vulnerability.circl.lu/sighting/41c27f4c-729e-4a9e-8a9a-132399dd395f/export 2026-08-18T18:38:01.886518+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"} 2026-08-18T12:09:44.383313+00:00 https://vulnerability.circl.lu/sighting/31d642e7-c14c-4866-babe-ca0196b6d8ce/export 2026-08-18T18:38:01.886618+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"} 2026-08-18T12:09:43.150747+00:00