The critical-severity path traversal flaw allows unauthenticated attackers to read arbitrary files from the GitLab server.

The post GitLab Vulnerability Exploited One Day After Disclosure appeared first on SecurityWeek.

CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.

The post Critical GitLab Flaw Exploited Shortly After Disclosure appeared first on SecurityWeek.