Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-19478 is a vulnerability classified as Improper Control of Generation of Code ('Code Injection'), affecting GitLab (affected versions: 18.2 – < 18.11.11, 19.0 – < 19.0.8, and other affected versions). This vulnerability is rated Critical, with a CVSS score of 9.4. Public exploit code or evidence is available for this vulnerability, but that does not confirm exploitation in the wild.
Analyzing data...
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
en
