LIVE · cybersecurity feed
Live wire

graphql news

1 stories
CVE-2026-19478critical

GitLab Critical GraphQL Flaw Actively Exploited

GitLab has confirmed that a critical vulnerability in its GraphQL API, identified as CVE-2026-19478, is being actively exploited in the wild. The flaw, which carries a CVSS score of 9.4, allows unauthenticated attackers to remotely modify or delete public projects and associated user data on self-managed GitLab instances.