← Back to the feed

~/article/critical-gitlab-flaw-allows-attackers-to-modify-or-delete-public-project-1jl2b2
highSource: Help Net Security

Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)

GitLab has released patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication. The vulnerabilities affect GitLab Community Edition (CE) and Enterprise Edition (EE) versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4. The fixes are available in GitLab 19.2.4, 19.1.6, 19.0.8, and…

Read at the source

Summary written for cymesh.dev. The full article lives at Help Net Security.

Referenced CVEs

CVE-2026-19478

Topics

cve
~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks
Open the consoleSee cymesh.net

Related

~/related/critical-gitlab-flaw-allows-attackers-to-modify-or-delete-public-project-1jl2b2