Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4. Released on
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
TN

The Hacker News

2h ago
0 0

Discussion

Take the lead—comment now

Lead the way—your insights can inspire others.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Video Call Exploit Chains Two Flaws in Unisoc Modems

Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their…
DR

Dark Reading

5h ago
0
bleepingcomputer.com
Hacker claims 3.6 million Azure account records stolen from maj…

A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access us…
LK

Lars Khan

8h ago
0
thehackernews.com
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Comma…

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-con…
TN

The Hacker News

9h ago
0
bleepingcomputer.com
Microsoft confirms GitHub is down worldwide

GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. [. .. ]
Carlos the great

Carlos the great

13h ago
0
thehackernews.com
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Br…

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions beca…
JA

jordan af

14h ago
0
thehackernews.com
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Device…

Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet…
TN

The Hacker News

17h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Comma…

Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-con…
TN

The Hacker News

9h ago
0
thehackernews.com
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Br…

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions beca…
JA

jordan af

14h ago
0
thehackernews.com
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Device…

Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet…
TN

The Hacker News

17h ago
0
thehackernews.com
Attackers Exploit SharePoint Authentication Bypass After Public…

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerabi…
MA

maya af

4d ago
0
thehackernews.com
OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode …

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and se…
TN

The Hacker News

5d ago
0
thehackernews.com
Attackers Exploit VMware vCenter Vulnerability to Gain Persiste…

Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The…
TN

The Hacker News

5d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest