⤷ Title: CVE-2026-19478 (CVSS 9.4): GitLab GraphQL Code Injection Flaw Patched
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CSRF #CVE_2026_19478 #CVE_2026_19650 #gitlab #graphql
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 18 Aug 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CSRF #CVE_2026_19478 #CVE_2026_19650 #gitlab #graphql
Daily CyberSecurity
CVE-2026-19478 (CVSS 9.4): GitLab GraphQL Code Injection Flaw Patched
TL;DR GitLab shipped an out-of-band critical patch on August 17, 2026. It fixes CVE-2026-19478, a GraphQL code injection flaw rated CVSS 9.4. Under certain conditions, an unauthenticated attacker …
⤷ Title: Critical GitLab Flaw Exploited Shortly After Disclosure
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:48:24 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #exploited #GitLab #vulnerability
════════════════════════
𐀪 Author: Ionut Arghire
════════════════════════
ⴵ Time: Thu, 20 Aug 2026 07:48:24 +0000
════════════════════════
⌗ Tags: #Vulnerabilities #exploited #GitLab #vulnerability
SecurityWeek
Critical GitLab Flaw Exploited Shortly After Disclosure
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
⤷ Title: GnuTLS Token Leak Threatens Open Source Supply Chain
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 16:02:53 +0000
════════════════════════
⌗ Tags: #Data Leak #gitlab #GnuTLS #open_source #Supply Chain
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 09 Sep 2026 16:02:53 +0000
════════════════════════
⌗ Tags: #Data Leak #gitlab #GnuTLS #open_source #Supply Chain
Daily CyberSecurity
GnuTLS Token Leak Threatens Open Source Supply Chain
At a glance Truffle Security researchers found a critical GnuTLS token leak on June 17, 2026. This exposure threatened the entire open-source supply chain. Organization: GnuTLS and OpenConnect pro…
⤷ Title: CVE-2026-85706: GitLab Vulnerability Reach CVSS 10.0
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 00:14:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_85706 #CVE_2026_87719 #CVE_2026_88765 #CVSS 10 #gitlab #GitLab vulnerabilities #Vulnerability
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 11 Sep 2026 00:14:06 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_85706 #CVE_2026_87719 #CVE_2026_88765 #CVSS 10 #gitlab #GitLab vulnerabilities #Vulnerability
Daily CyberSecurity
CVE-2026-85706: GitLab Vulnerability Reach CVSS 10.0
GitLab released security updates addressing eighteen security flaws on September 10, 2026. The vendor resolved several severe GitLab vulnerabilities across Community Edition and Enterprise Edition…
⤷ Title: How to Lock Down Public Projects on Self-Managed GitLab
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 14:29:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #devops #network_security #gitlab #application_security
════════════════════════
𐀪 Author: Anthony Bahn
════════════════════════
ⴵ Time: Sat, 12 Sep 2026 14:29:05 GMT
════════════════════════
⌗ Tags: #cybersecurity #devops #network_security #gitlab #application_security
Medium
How to Lock Down Public Projects on Self-Managed GitLab
Why Public Projects Widen the Attack Surface
⤷ Title: Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 01:46:11 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #Exploited Vulnerabilities #gitlab #Mikrotik RouterOs #N_able N_central #threat intelligence #Weekly CVE Report
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 14 Sep 2026 01:46:11 +0000
════════════════════════
⌗ Tags: #Weekly Recap #CISA KEV #Exploited Vulnerabilities #gitlab #Mikrotik RouterOs #N_able N_central #threat intelligence #Weekly CVE Report
Daily CyberSecurity
Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV
Between September 7 and September 13, 2026, our tracker logged 3,856 new CVEs. This weekly CVE report focuses on the 19 flaws that Daily Cybersecurity flagged as exploited. Ten later reached the C…
⤷ Title: Critical GitLab Flaw Transitions to Active Global Threat
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 04:16:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2026_85706 #Cyber Security #Gitlab
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 16 Sep 2026 04:16:55 +0000
════════════════════════
⌗ Tags: #Vulnerability #CISA #CVE_2026_85706 #Cyber Security #Gitlab
Information Security News
Critical GitLab Flaw Transitions to Active Global Threat
A critical GitLab vulnerability, bearing the maximum possible CVSS score of 10, has officially transitioned from a theoretical urgent update into a verified, real-world threat. The Cybersecurity a…
⤷ Title: CVE-2026–2619: How a Read-Only GitLab Auditor Could Modify Vulnerability Flags
════════════════════════
𐀪 Author: KabishDahal
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:51:38 GMT
════════════════════════
⌗ Tags: #application_security #bug_bounty_writeup #gitlab #access_control #cybersecurity
════════════════════════
𐀪 Author: KabishDahal
════════════════════════
ⴵ Time: Fri, 18 Sep 2026 06:51:38 GMT
════════════════════════
⌗ Tags: #application_security #bug_bounty_writeup #gitlab #access_control #cybersecurity
Medium
CVE-2026–2619: How a Read-Only GitLab Auditor Could Modify Vulnerability Flags
An authorization flaw in GitLab’s AI detection API, the evidence behind my report, and the permission change that fixed it.
⤷ Title: GitLab Critical Patch Release Fixes Severe RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 23:36:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_89078 #CVE_2026_93577 #cybersecurity #gitlab #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 23 Sep 2026 23:36:46 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_89078 #CVE_2026_93577 #cybersecurity #gitlab #Remote Code Execution
Daily CyberSecurity
GitLab Critical Patch Release Fixes Severe RCE Flaws
TL;DR On September 23, 2026, developers launched a GitLab critical patch release fixing 11 security flaws. The most dangerous defects allow authenticated users to trigger a GitLab RCE vulnerabilit…
⤷ Title: GitLab Email Token Vulnerability Exposes CI/CD Pipelines
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 02:18:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #CI/CD #cybersecurity #Gitlab #security research
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 02:18:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #CI/CD #cybersecurity #Gitlab #security research
Information Security News
GitLab Email Token Vulnerability Exposes CI/CD Pipelines
A seemingly mundane feature designed for emailing issue tasks has proven to be alarmingly akin to a fully privileged account, belying its innocuous interface. Joe Leon from Aikido Security demonst…
⤷ Title: GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 21:42:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #AI security #CVE_2026_90970 #gitlab #GitLab Duo #Remote Code Execution #Template Injection
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 02 Oct 2026 21:42:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Gateway #AI security #CVE_2026_90970 #gitlab #GitLab Duo #Remote Code Execution #Template Injection
Daily CyberSecurity
GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands
TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway vulnerability scores 9.9 on CVSS 3.1. It lets a logged-in Duo Agent Platform user …
⤷ Title: Critical GitLab AI Gateway Vulnerability Highlights the Security Risks of AI Powered Development
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 17:10:56 GMT
════════════════════════
⌗ Tags: #ai_security #cybersecurity #artificial_intelligence #gitlab #application_security
════════════════════════
𐀪 Author: Jas
════════════════════════
ⴵ Time: Sat, 03 Oct 2026 17:10:56 GMT
════════════════════════
⌗ Tags: #ai_security #cybersecurity #artificial_intelligence #gitlab #application_security
Medium
Critical GitLab AI Gateway Vulnerability Highlights the Security Risks of AI Powered Development
Artificial intelligence is becoming deeply integrated into modern software development. AI assistants and agent platforms can analyze code…
⤷ Title: How I Discovered Blind SSRF in GitLab Leading to Localhost Access and RCE
════════════════════════
𐀪 Author: Mostafa shaban
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 08:50:01 GMT
════════════════════════
⌗ Tags: #vulnerability #gitlab #hackerone #bug_bounty
════════════════════════
𐀪 Author: Mostafa shaban
════════════════════════
ⴵ Time: Wed, 07 Oct 2026 08:50:01 GMT
════════════════════════
⌗ Tags: #vulnerability #gitlab #hackerone #bug_bounty
Medium
How I Discovered Blind SSRF in GitLab Leading to Localhost Access and RCE
Hey there,
⤷ Title: GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 08:18:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_16301 #CVE_2026_92883 #CVE_2026_97229 #DevSecOps #gitlab #security update
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 12 Oct 2026 08:18:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Arbitrary Code Execution #CI/CD security #CVE_2026_16301 #CVE_2026_92883 #CVE_2026_97229 #DevSecOps #gitlab #security update
Daily CyberSecurity
GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code
TL;DR GitLab released versions 19.4.2, 19.3.4 and 19.2.8 on October 8, 2026, fixing 24 security issues. The worst, CVE-2026-97229, is a GitLab critical vulnerability with a CVSS score of 10.0. It …
⤷ Title: GitLab Critical Vulnerability Scores a Perfect 10.0
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 04:02:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #CI/CD Security #CVE_2026_97229 #DevSecOps #Gitlab #GitLab Duo #HackerOne #remote code execution #vulnerability
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 04:02:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #CI/CD Security #CVE_2026_97229 #DevSecOps #Gitlab #GitLab Duo #HackerOne #remote code execution #vulnerability
Information Security News
GitLab Critical Vulnerability Scores a Perfect 10.0
GitLab Patches a Maximum-Severity Flaw GitLab has fixed a critical vulnerability that, under certain conditions, lets attackers run arbitrary code on a server. They need no password and no user in…
⤷ Title: Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 07:41:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_97229 #gitlab #GitLab RCE #GitLab RCE vulnerability #Rapid7 #Remote Code Execution
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 07:41:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_97229 #gitlab #GitLab RCE #GitLab RCE vulnerability #Rapid7 #Remote Code Execution
Daily CyberSecurity
Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
TL;DR GitLab patched CVE-2026-97229, a maximum-severity (CVSS 10.0) integer overflow flaw in its CI/CD regular expression compiler. Shortly after the patch, Rapid7 researchers publicly disclosed t…
⤷ Title: A Practical Guide to Hunting Bugs in GraphQL When Introspection Is Off
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:21:17 GMT
════════════════════════
⌗ Tags: #vulnerability_disclosure #path_traversal #web_security #bug_bounty #gitlab
════════════════════════
𐀪 Author: Raj Namdev
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 04:21:17 GMT
════════════════════════
⌗ Tags: #vulnerability_disclosure #path_traversal #web_security #bug_bounty #gitlab
⤷ Title: GitLab Critical Patch Release Fixes 10.0 CVSS Remote Code Execution Flaw and 11 Other Bugs
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 22:33:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_105777 #CVE_2026_110264 #CVE_2026_112212 #CVE_2026_12664 #CVE_2026_15723 #gitlab #rce
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 22:33:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_105777 #CVE_2026_110264 #CVE_2026_112212 #CVE_2026_12664 #CVE_2026_15723 #gitlab #rce
Daily CyberSecurity
GitLab Critical Patch Release Fixes 10.0 CVSS Remote Code Execution Flaw and 11 Other Bugs
TL;DR GitLab published an urgent security update on October 21, 2026, addressing 12 newly disclosed GitLab vulnerabilities across Community Edition (CE) and Enterprise Edition (EE). The most sever…
⤷ Title: The Patch That Wasn’t: A Perfect-10 Pre-Auth RCE in GitLab That Hides in a Regex Engine
════════════════════════
𐀪 Author: Peter Dunn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #vulnerability #gitlab #devsecops
════════════════════════
𐀪 Author: Peter Dunn
════════════════════════
ⴵ Time: Fri, 23 Oct 2026 13:01:03 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #vulnerability #gitlab #devsecops
Medium
The Patch That Wasn’t: A Perfect-10 Pre-Auth RCE in GitLab That Hides in a Regex Engine
A senior-level field briefing on CVE-2026–110264: how an unauthenticated attacker runs code on your GitLab server by uploading a text file…
⤷ Title: Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 26 Oct 2026 01:00:35 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_110264 #CVE_2026_89078 #CVE_2026_97229 #gitlab #Onigmo #Remote Code Execution #Ruby
Daily CyberSecurity
Ruby Fixes Onigmo Regex Bugs Behind Critical GitLab RCE Flaws
TL;DR On October 23, 2026, the Ruby team shipped a Ruby security update in versions 4.0.9, 3.4.12 and 3.3.13. The releases fix memory bugs in Onigmo, Ruby’s regular expression engine. GitLab…