<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-08T11:53:00.757600+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b410f5a1-fef7-4438-8f8d-4705f09922d6/export</id>
    <title>b410f5a1-fef7-4438-8f8d-4705f09922d6</title>
    <updated>2026-09-08T11:53:00.799945+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b410f5a1-fef7-4438-8f8d-4705f09922d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mutozexru32p", "content": "\ud83d\udccc GitLab Releases Critical Security Updates for GraphQL API Vulnerability (CVE-2026-19478) https://www.cyberhub.blog/article/30817-gitlab-releases-critical-security-updates-for-graphql-api-vulnerability-cve-2026-19478", "creation_timestamp": "2026-09-06T09:37:08.078368Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b410f5a1-fef7-4438-8f8d-4705f09922d6/export"/>
    <published>2026-09-06T09:37:08.078368+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f/export</id>
    <title>e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f</title>
    <updated>2026-09-08T11:53:00.802044+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-05T01:00:21.657794Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f/export"/>
    <published>2026-09-05T01:00:21.657794+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f7ec0058-dd04-42b3-ab60-356a7e5531b6/export</id>
    <title>f7ec0058-dd04-42b3-ab60-356a7e5531b6</title>
    <updated>2026-09-08T11:53:00.802179+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f7ec0058-dd04-42b3-ab60-356a7e5531b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-04T17:00:05.678109Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f7ec0058-dd04-42b3-ab60-356a7e5531b6/export"/>
    <published>2026-09-04T17:00:05.678109+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/021ff731-87eb-48fa-9f6e-05ad95e6f9c8/export</id>
    <title>021ff731-87eb-48fa-9f6e-05ad95e6f9c8</title>
    <updated>2026-09-08T11:53:00.802284+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "021ff731-87eb-48fa-9f6e-05ad95e6f9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-03T00:00:40.449984Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/021ff731-87eb-48fa-9f6e-05ad95e6f9c8/export"/>
    <published>2026-09-03T00:00:40.449984+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ab5cde3b-0220-481a-a5f7-48ebfc62991f/export</id>
    <title>ab5cde3b-0220-481a-a5f7-48ebfc62991f</title>
    <updated>2026-09-08T11:53:00.802400+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ab5cde3b-0220-481a-a5f7-48ebfc62991f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-02T18:00:05.396549Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ab5cde3b-0220-481a-a5f7-48ebfc62991f/export"/>
    <published>2026-09-02T18:00:05.396549+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79d86236-995e-4ced-a22f-6bd1b038b3bb/export</id>
    <title>79d86236-995e-4ced-a22f-6bd1b038b3bb</title>
    <updated>2026-09-08T11:53:00.802498+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79d86236-995e-4ced-a22f-6bd1b038b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-30T00:00:38.814458Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79d86236-995e-4ced-a22f-6bd1b038b3bb/export"/>
    <published>2026-08-30T00:00:38.814458+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c26ed7e9-055e-4a08-b2e4-62e61a930bb8/export</id>
    <title>c26ed7e9-055e-4a08-b2e4-62e61a930bb8</title>
    <updated>2026-09-08T11:53:00.802603+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c26ed7e9-055e-4a08-b2e4-62e61a930bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-30T00:00:38.512419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c26ed7e9-055e-4a08-b2e4-62e61a930bb8/export"/>
    <published>2026-08-30T00:00:38.512419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/028306ae-d3c3-4739-8aaa-04a270b3ec6a/export</id>
    <title>028306ae-d3c3-4739-8aaa-04a270b3ec6a</title>
    <updated>2026-09-08T11:53:00.802697+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "028306ae-d3c3-4739-8aaa-04a270b3ec6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-29T20:00:05.443016Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/028306ae-d3c3-4739-8aaa-04a270b3ec6a/export"/>
    <published>2026-08-29T20:00:05.443016+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65dfff28-ab86-4fb3-b757-0a7a30e35d12/export</id>
    <title>65dfff28-ab86-4fb3-b757-0a7a30e35d12</title>
    <updated>2026-09-08T11:53:00.802788+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65dfff28-ab86-4fb3-b757-0a7a30e35d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-29T20:00:04.750224Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65dfff28-ab86-4fb3-b757-0a7a30e35d12/export"/>
    <published>2026-08-29T20:00:04.750224+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fb62ca5f-90ba-40e3-9937-06a1267ffd38/export</id>
    <title>fb62ca5f-90ba-40e3-9937-06a1267ffd38</title>
    <updated>2026-09-08T11:53:00.802883+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fb62ca5f-90ba-40e3-9937-06a1267ffd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7x7cmjle23", "content": "~Checkpoint~\nCritical flaws, AI-assisted attacks and Cl0p exploitation drive this week\u2019s threats.\n-\nIOCs: CVE-2026-19478, CVE-2026-12569\n-\n#AIThreats #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:10:22.640588Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fb62ca5f-90ba-40e3-9937-06a1267ffd38/export"/>
    <published>2026-08-29T13:10:22.640588+00:00</published>
  </entry>
</feed>
