Critical GitLab Flaw Exploited Shortly After Disclosure

As cited

Citation snapshot as of 2026-08-20 10:17 UTC.

vulnerabilities

Critical GitLab Flaw Exploited Shortly After Disclosure

CVE-2026-19478 affects GitLab and permits unauthenticated attackers to modify or delete public projects and user data. Active exploitation began shortly after the vulnerability became public.

Why it matters: GitLab instance administrators and users with public projects must patch immediately to prevent data loss and unauthorized modification; attackers are actively weaponizing this flaw.

Source published

2026-08-20 07:48 UTC

First seen by Cybersecurity Tracker

2026-08-20 10:00 UTC