https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 18:38:02 +0000 https://vulnerability.circl.lu/sighting/fe571e12-3663-47bb-b0f0-02d70775bb1f/export {"uuid": "fe571e12-3663-47bb-b0f0-02d70775bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:05.878288Z"} {"uuid": "fe571e12-3663-47bb-b0f0-02d70775bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:05.878288Z"} https://vulnerability.circl.lu/sighting/fe571e12-3663-47bb-b0f0-02d70775bb1f/export Tue, 18 Aug 2026 16:15:05 +0000 https://vulnerability.circl.lu/sighting/3026cf48-8b90-4d59-8d24-1023395f8d3e/export {"uuid": "3026cf48-8b90-4d59-8d24-1023395f8d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-18T16:00:04.270460Z"} {"uuid": "3026cf48-8b90-4d59-8d24-1023395f8d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-18T16:00:04.270460Z"} https://vulnerability.circl.lu/sighting/3026cf48-8b90-4d59-8d24-1023395f8d3e/export Tue, 18 Aug 2026 16:00:04 +0000 https://vulnerability.circl.lu/sighting/ae839074-59c3-424e-8f37-8a8e7a545d89/export {"uuid": "ae839074-59c3-424e-8f37-8a8e7a545d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelii7uiq2m", "content": "Emergency patch time if you're managing your own #GitLab instance! Out of band patch was released for CVE-2026-19478 (CVSS=9.4), a code-injection vulnerability in GraphQL directive handling that can be exploited without authentication.\n\nFull advisory: buff.ly/zO3C6Bj \n\n#GitLab #DevSecOps", "creation_timestamp": "2026-08-18T15:58:52.354683Z"} {"uuid": "ae839074-59c3-424e-8f37-8a8e7a545d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelii7uiq2m", "content": "Emergency patch time if you're managing your own #GitLab instance! Out of band patch was released for CVE-2026-19478 (CVSS=9.4), a code-injection vulnerability in GraphQL directive handling that can be exploited without authentication.\n\nFull advisory: buff.ly/zO3C6Bj \n\n#GitLab #DevSecOps", "creation_timestamp": "2026-08-18T15:58:52.354683Z"} https://vulnerability.circl.lu/sighting/ae839074-59c3-424e-8f37-8a8e7a545d89/export Tue, 18 Aug 2026 15:58:52 +0000 https://vulnerability.circl.lu/sighting/d3cf072d-0601-4b4f-9430-e34cec107169/export {"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"} {"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"} https://vulnerability.circl.lu/sighting/d3cf072d-0601-4b4f-9430-e34cec107169/export Tue, 18 Aug 2026 14:00:03 +0000 https://vulnerability.circl.lu/sighting/57134a7f-5243-4383-8b91-4b8a993f4ceb/export {"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"} {"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"} https://vulnerability.circl.lu/sighting/57134a7f-5243-4383-8b91-4b8a993f4ceb/export Tue, 18 Aug 2026 13:09:03 +0000 https://vulnerability.circl.lu/sighting/cc798fa9-fef6-4c81-a0f3-db031e6022e6/export {"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"} {"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"} https://vulnerability.circl.lu/sighting/cc798fa9-fef6-4c81-a0f3-db031e6022e6/export Tue, 18 Aug 2026 12:18:49 +0000 https://vulnerability.circl.lu/sighting/50d290bd-81df-41e3-90d8-feb5c0efb178/export {"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"} {"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"} https://vulnerability.circl.lu/sighting/50d290bd-81df-41e3-90d8-feb5c0efb178/export Tue, 18 Aug 2026 12:15:24 +0000 https://vulnerability.circl.lu/sighting/80c61fab-b2bd-4ae4-a885-15605f3dd97d/export {"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"} {"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"} https://vulnerability.circl.lu/sighting/80c61fab-b2bd-4ae4-a885-15605f3dd97d/export Tue, 18 Aug 2026 12:14:01 +0000 https://vulnerability.circl.lu/sighting/41c27f4c-729e-4a9e-8a9a-132399dd395f/export {"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"} {"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"} https://vulnerability.circl.lu/sighting/41c27f4c-729e-4a9e-8a9a-132399dd395f/export Tue, 18 Aug 2026 12:09:44 +0000 https://vulnerability.circl.lu/sighting/31d642e7-c14c-4866-babe-ca0196b6d8ce/export {"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"} {"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"} https://vulnerability.circl.lu/sighting/31d642e7-c14c-4866-babe-ca0196b6d8ce/export Tue, 18 Aug 2026 12:09:43 +0000