The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server.

The post GitLab Vulnerability Exploited One Day After Disclosure appeared first on SecurityWeek.

CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.

The post Critical GitLab Flaw Exploited Shortly After Disclosure appeared first on SecurityWeek.

The security defect allows unauthenticated attackers to modify or delete user data and public projects.

The post GitLab Patches Critical Code Injection Vulnerability appeared first on SecurityWeek.