{"vulnerability": "CVE-2026-19478", "sightings": [{"uuid": "c26ed7e9-055e-4a08-b2e4-62e61a930bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-30T00:00:38.512419Z"}, {"uuid": "79d86236-995e-4ced-a22f-6bd1b038b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-30T00:00:38.814458Z"}, {"uuid": "50d290bd-81df-41e3-90d8-feb5c0efb178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mte6ywejz72r", "content": "\ud83d\udd17 CVE : CVE-2026-19478, CVE-2026-19650", "creation_timestamp": "2026-08-18T12:15:24.455819Z"}, {"uuid": "cc798fa9-fef6-4c81-a0f3-db031e6022e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mte76yfqas2y", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nwww.helpnetsecurity.com/2026/08/18/g...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-08-18T12:18:49.768084Z"}, {"uuid": "b8a7f6d2-2210-469f-a58e-172067c87ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mto6etks4u2t", "content": "GitLab released security updates for CVE-2026-19478, a critical flaw (CVSS 9.4) that could let attackers remotely modify or delete public projects and user data in CE & EE. Update now!", "creation_timestamp": "2026-08-22T11:30:48.158763Z"}, {"uuid": "47b65f5f-e254-463d-aa5f-9109b6fe13cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/456", "content": "CVE-2026-19478 - GitLab GraphQL @ gl_introduced directive authorization bypass\nAffected: GitLab CE/EE 18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3\nType: Auth bypass (unauthenticated arbitrary zero-arity Ruby method invocation)", "creation_timestamp": "2026-08-21T20:00:03.152911Z"}, {"uuid": "56bd594e-7220-4912-a9bc-ba819ef88d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/457", "content": "", "creation_timestamp": "2026-08-21T20:00:03.249308Z"}, {"uuid": "57134a7f-5243-4383-8b91-4b8a993f4ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/uutis.bsky.social/post/3mtebytuwwl2y", "content": "GitLab on julkaissut h\u00e4t\u00e4p\u00e4ivityksen, joka korjaa kriittisen GraphQL-haavoittuvuuden (CVE-2026-19478, CVSS 9,4).\n\n#kyberturvallisuus", "creation_timestamp": "2026-08-18T13:09:03.958496Z"}, {"uuid": "d3cf072d-0601-4b4f-9430-e34cec107169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-18T14:00:03.510900Z"}, {"uuid": "d4916f05-f8a5-4266-8906-c863e7fc5905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtirmd3ovw25", "content": "\u30c7\u30a3\u30b9\u30af\u30ed\u30fc\u30b8\u30e3\u30fc\u76f4\u5f8c\u306b\u60aa\u7528\u3055\u308c\u305f\u3001GitLab\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\n\n\u653b\u6483\u5074\u306e\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u306f\u3001GitLab\u306e\u91cd\u5927\u5ea6\u306e\u8106\u5f31\u6027\u304c\u516c\u958b\u3055\u308c\u3066\u304b\u3089\u308f\u305a\u304b2\u65e5\u307b\u3069\u3067\u60aa\u7528\u3092\u958b\u59cb\u3057\u3066\u3044\u305f\u3068\u3001\u653b\u6483\u5bfe\u8c61\u9818\u57df\u7ba1\u7406\u4f01\u696d\u306eWatchTowr\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 CVE-2026-19478(CVSS\u30b9\u30b3\u30a29.4)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u306f8\u670817\u65e5\u306b\u30d1\u30c3\u30c1\u304c\u63d0\u4f9b\u3055\u308c\u3001GitLab\u306f\u3053", "creation_timestamp": "2026-08-20T07:59:01.834969Z"}, {"uuid": "d62ad1ae-0915-4060-a533-f66f5f3c95f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117122601747823700", "content": "Critical and High-Severity GraphQL CVEs in GitLab: Code Injection and CSRF via One Directive#GitLab #CVE_2026_19478 #CVE_2026_19650 https://www.ox.security/blog/gitlab-graphql-cve-2026-19478-19650/", "creation_timestamp": "2026-08-19T14:17:54.939121Z"}, {"uuid": "c3842759-b56b-41d1-a3af-1fc4cdd5e72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtirpmsgr32e", "content": "CVE-2026-19478 enables unauthenticated remote code injection in GitLab, allowing deletion and modification of public projects; attackers began exploiting within two days.\n", "creation_timestamp": "2026-08-20T08:00:53.301716Z"}, {"uuid": "dd10fd09-1642-46c3-a355-dbfe7e53f8df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtirq2oyl62n", "content": "CVE-2026-19478 enables unauthenticated remote code injection in GitLab, allowing deletion and modification of public projects; attackers began exploiting within two days.\n", "creation_timestamp": "2026-08-20T08:01:08.049809Z"}, {"uuid": "eb25e471-dc42-4131-86d1-d1abd2315313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/24147", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-22T04:00:20.798630Z"}, {"uuid": "ae839074-59c3-424e-8f37-8a8e7a545d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mtelii7uiq2m", "content": "Emergency patch time if you're managing your own #GitLab instance! Out of band patch was released for CVE-2026-19478 (CVSS=9.4), a code-injection vulnerability in GraphQL directive handling that can be exploited without authentication.\n\nFull advisory: buff.ly/zO3C6Bj \n\n#GitLab #DevSecOps", "creation_timestamp": "2026-08-18T15:58:52.354683Z"}, {"uuid": "3026cf48-8b90-4d59-8d24-1023395f8d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-18T16:00:04.270460Z"}, {"uuid": "29dc92c2-a99c-4e27-a7a6-80e766f083a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/bdufstecru/3390", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 git \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043a\u043e\u0434\u043e\u043c GitLab EE/ CE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11879\nCVE-2026-19478\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/", "creation_timestamp": "2026-08-19T16:00:03.939269Z"}, {"uuid": "fe571e12-3663-47bb-b0f0-02d70775bb1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-gitlab-producten-ontdekt-update-nu", "content": "", "creation_timestamp": "2026-08-18T16:15:05.878288Z"}, {"uuid": "3a254d99-5270-4b1b-980e-b77960c7b943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtnjt7qdus2q", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\n\nA newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4\u2026\n#hackernews #news", "creation_timestamp": "2026-08-22T05:23:01.931646Z"}, {"uuid": "175fabca-b7a3-48ad-9777-4114809e7598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mtnm3jhmsc26", "content": "\ud83d\udea8 BREAKING: GitLab CVE-2026-19478 (CVSS 9.4) under active exploitation within days of disclosure. Unauthenticated attackers can modify/delete public projects and forge merge records. Patch to 19.2.4/19.1.6/19.0.8/18.11.11 immediately. Source: thehackernews.com #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-22T06:03:28.125188Z"}, {"uuid": "d1b4e7cb-04eb-494a-b35d-66e3bfe4ed35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mtj6uzcgp52s", "content": "To nobody's surprise, threat actors wasted zero seconds exploiting CVE-2026-19478 in GitLab immediately following its disclosure. Anyone managing public repositories and user data on the platform is on the hook as attackers merrily modify or wipe out projects without needing to a...\n\nRead full story", "creation_timestamp": "2026-08-20T11:56:32.127097Z"}, {"uuid": "4a7dfbfd-6cdd-434e-9db3-7fb1484a1a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/pphm_HackerNews/2685", "content": "\ud83d\udd34 GitLab Patches Critical Unauthenticated GraphQL Vulnerability\n\nGitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers.\n\nGitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user data.\n\n\u201cGitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.\u201d reads the advisory.", "creation_timestamp": "2026-08-21T23:00:05.782262Z"}, {"uuid": "eba08c3f-ed3d-422f-ac89-98cacef810e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtl7d7usqt2d", "content": "GitLab CVE-2026-19478 under active exploit \u2014 update or block GraphQL endpoints immediately. #GitLab #CVE2026-19478 #CodeInjection #DevSecOps #SecurityNews #AIThreats https://thedailytechfeed.com/gitlab-flaw-cve-2026-19478-targeted-in-active-exploits-days-after-disclosure/", "creation_timestamp": "2026-08-21T07:09:49.616460Z"}, {"uuid": "05f2edbe-3243-425c-a49e-72f56d56bf45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/georgesl.bsky.social/post/3mtl7pjuklk2u", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-21T07:16:44.499955Z"}, {"uuid": "266feca4-62b5-4d29-9b53-817a9ef49004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/tierrasapiens.bsky.social/post/3mtlclwrob62l", "content": "\ud83d\uddb2\ufe0f #Noticia #CiberSeguridad #Cybersecurity #CiberNoticia\n\nGitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\n\nLeer M\u00e1s / Read More...", "creation_timestamp": "2026-08-21T08:08:22.352297Z"}, {"uuid": "f61a851f-b956-4831-8077-7482cbfc33fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mtlcvaaeez2i", "content": "CVE-2026-19478 enables unauthenticated code injection in GitLab to modify or delete public projects and rewrite data, with rapid real-world exploitation after disclosure.\n", "creation_timestamp": "2026-08-21T08:13:34.274794Z"}, {"uuid": "d7d8685a-c7a5-439d-bb43-d0778ccc9fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mtlcvbk2pz27", "content": "CVE-2026-19478 enables unauthenticated code injection in GitLab to modify or delete public projects and rewrite data, with rapid real-world exploitation after disclosure.\n", "creation_timestamp": "2026-08-21T08:13:36.266430Z"}, {"uuid": "b794aa75-794e-486c-a533-51d762fbaa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mtldg7ivb52e", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVS...\n\n\ud83d\udd17 https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-21T08:23:04.521512Z"}, {"uuid": "dcf5f166-1420-4ed7-9abb-8ded1cefc95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/qubblelabs.com/post/3mtjdbnn5hk2f", "content": "GitLab\u2019s CVE-2026-19478 is a zero-click flaw with no technical details, leaving self-managed instances defenseless. Like XZ Utils, this breach erodes trust\u2014silently. The next backdoor is already in. (Source: DarkReading)", "creation_timestamp": "2026-08-20T13:15:11.933892Z"}, {"uuid": "0008cf0f-cb41-476c-926d-4794af848720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mthbul4xax2l", "content": "CVE-2026-19478 is trending. Hype score 5, currently #10 on cvemon.\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-19478", "creation_timestamp": "2026-08-19T17:44:39.178787Z"}, {"uuid": "8308e2a3-4595-4baf-90c9-c6449ed25d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mteytxefll2h", "content": "GitLab CVE-2026-19478: a critical vulnerability lets unauthenticated attackers modify or delete public projects in one request. watchTowr reproduced it within minutes using Project Red, before any public exploit exis\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2089798514662363151)", "creation_timestamp": "2026-08-18T19:57:55.590191Z"}, {"uuid": "772ca0a4-3f36-4d82-bce5-411bb5b49021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/ctinow/255488", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\nhttps://ift.tt/ue9k2NB", "creation_timestamp": "2026-08-21T09:00:04.763041Z"}, {"uuid": "6120677c-0a49-4df4-94e2-4ce1c6f011d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mtlfklgdzd2q", "content": "GitLab CVE-2026-19478 \u304c\u516c\u958b\u76f4\u5f8c\u304b\u3089\u60aa\u7528\u3055\u308c\u308b\n\nGitLab CVE-2026-19478 \u304c\u3059\u3067\u306b\u5b9f\u969b\u306e\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002\u8a8d\u8a3c\u306a\u3057\u3067\u7279\u5b9a\u6761\u4ef6\u4e0b\u306e\u30d1\u30d6\u30ea\u30c3\u30af\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a\u9664\u53ef\u80fd\u3002\u65e9\u6025\u306a\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u9808\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-21T09:01:37.193150Z"}, {"uuid": "cbd0efd1-6019-4bd0-867f-2f05d6c3823d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mtlgmyoxwa2d", "content": "GitLab CVE-2026-19478 Under Active Exploitation \u2014 Patch Immediately\n\nhttps://blindthoughts.com/gitlab-cve-2026-19478-active-exploitation\n\n#gitlab #cve #codeinjection #vulnerability #patchnow", "creation_timestamp": "2026-08-21T09:20:32.629061Z"}, {"uuid": "50a2bbff-33ee-4961-a60e-6b2ac7e9e028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring", "creation_timestamp": "2026-08-21T10:00:49.423920Z"}, {"uuid": "c0728389-af18-4647-b8b5-24355c92cf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mtlj47afss2f", "content": "A critical GitLab vulnerability (CVE-2026-19478, CVSS 9.4) enables unauthenticated attackers to modify or delete public projects via GraphQL injection. Exploitation [\u2026]", "creation_timestamp": "2026-08-21T10:04:50.717262Z"}, {"uuid": "65dfff28-ab86-4fb3-b757-0a7a30e35d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2636", "content": "Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.", "creation_timestamp": "2026-08-29T20:00:04.750224Z"}, {"uuid": "ec01aee2-ddee-413c-8deb-79450fa5678b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8be740f7-f66c-4c6a-a3a2-807efdee9625", "content": "", "creation_timestamp": "2026-08-22T08:00:30.766385Z"}, {"uuid": "ed05da59-f713-45ac-a72e-3a22601d9a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "Telegram/vEbmjoRYt04v0ZC0euMZdfrOphLUWqQQy7SM_HrVY46dKQ", "content": "", "creation_timestamp": "2026-08-21T11:00:03.986897Z"}, {"uuid": "e971e0fd-9c7c-4c5a-ae4c-f5a7531052ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-22T00:00:08.435627Z"}, {"uuid": "39aa9d69-6b60-4f26-ad9d-49564ceca95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtlnrqt3i72y", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): code injection in GitLab under active exploitation within days of disclosure. Unauthenticated attackers can modify or delete public GitLab projects and rewrite data.\nhttps://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-21T11:28:28.205167Z"}, {"uuid": "cd8e3adb-5176-44ab-b3eb-0c4e83546854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mtjlafuefs2o", "content": "\ud83d\udea8 \ud83e\udd8a  GitLab flaw exploited within two days\n\nCVE-2026-19478 lets unauthenticated attackers alter or delete public projects via #GraphQL.\n\ud83d\udd17 read more: www.securityweek.com...\n\n#ransomNews #cyberthreats #GitLab \n", "creation_timestamp": "2026-08-20T15:37:39.864301Z"}, {"uuid": "92113d9b-a79e-4677-88b6-ea8e6c19431a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/07b77452-0e39-4141-9d36-78ce09d36b06", "content": "", "creation_timestamp": "2026-08-21T11:38:29.129670Z"}, {"uuid": "bce5ea89-b52c-468c-8c58-548d39c5b49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/pphm_HackerNews/2685", "content": "\ud83d\udd34 GitLab Patches Critical Unauthenticated GraphQL Vulnerability\n\nGitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers.\n\nGitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user data.\n\n\u201cGitLab has remediated an issue that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.\u201d reads the advisory.", "creation_timestamp": "2026-08-22T00:00:08.778102Z"}, {"uuid": "836f5304-b659-4470-841c-1e8f28e77298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtfbduc6sm2v", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): unauthenticated remote modification/deletion of public projects in GitLab CE/EE via GraphQL directive. Affects 18.2-19.2, fixed in 19.2.4. Zero-click.\n\nhttps://www.darkreading.com/application-security/critical-gitlab-zero-click-flaw-mitigation-challenges", "creation_timestamp": "2026-08-18T22:29:58.793096Z"}, {"uuid": "0bdfe258-9340-42ef-add5-a65cec7c9b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117133461734366713", "content": "A critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.https://securityaffairs.com/197622/uncategorized/gitlab-warns-of-active-exploitation-of-critical-graphql-flaw.html", "creation_timestamp": "2026-08-21T12:19:45.155525Z"}, {"uuid": "175acdab-c28e-4aae-8d68-f35d01ee25f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/yna2SgiXqU8Yl76-ls-5XNafbPbcL6XsZZAFlQw-z_g2N4Y", "content": "", "creation_timestamp": "2026-08-19T00:00:10.488031Z"}, {"uuid": "ba35d935-0c6e-490d-a463-df68cf9e097b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-19T00:00:26.282240Z"}, {"uuid": "dbffc940-8f0f-4b75-bdad-e603466135b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/ZxcQ6RVn-5sFAZ4qkLho0f4GJRaaxyJWc-8e0k9Lah5Vjrw", "content": "", "creation_timestamp": "2026-08-19T00:00:27.185436Z"}, {"uuid": "1452876c-4906-4cea-86d6-d9e2cf831625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/12950", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-21T13:00:03.500064Z"}, {"uuid": "1fcf655d-68dc-45b5-a927-754ef698db8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://threatintel.cc/2026/08/21/gitlab-warns-of-active-exploitation.html", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nA critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.", "creation_timestamp": "2026-08-21T13:00:40.345149Z"}, {"uuid": "a4c8e66c-99eb-42b8-9fb4-0e4b66092bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/436", "content": "vulnerability: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html\ncve: CVE-2026-19478\nsomeone published poc in github: https://github.com/davkharrr/cve-2026-19478-poc", "creation_timestamp": "2026-08-19T00:00:11.775110Z"}, {"uuid": "3d86dbb2-382f-4020-a927-58759312de98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:26.978099Z"}, {"uuid": "23856c50-0eb8-4c60-b071-7f500246e971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtcno7wuqs2j", "content": "GitLab CE/EE\u306b\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3084\u30e6\u30fc\u30b6\u30fc\u30c7\u30fc\u30bf\u3092\u524a\u9664\u30fb\u6539\u5909\u53ef\u80fd\u306a\u8a8d\u8a3c\u306a\u3057\u306e\u8106\u5f31\u6027\uff08CVE-2026-19478\uff09\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-08-17T21:32:33.028896Z"}, {"uuid": "d762acc7-b287-4390-8809-e6008da7bc93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "content": "GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data.\n\nThe flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4.\n\nReleased on", "creation_timestamp": "2026-08-17T22:00:44.357516Z"}, {"uuid": "6faa30b9-1049-47be-85e9-3136848baf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtcpnfeuaz25", "content": "\ud83d\udea8 CVE-2026-19478 \u2014 CVSS 9.4 CRITICAL\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 befor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19478\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T22:07:51.678926Z"}, {"uuid": "d2a81629-21bf-4055-b502-ff4140a71f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtcpnk3p652v", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): Critical GitLab GraphQL flaw lets unauthenticated attackers modify or delete public projects and user data. Patches released, update now.\nhttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-17T22:07:56.706081Z"}, {"uuid": "37db94ea-8eb1-4915-8319-792d39693f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mtfimg6u3z2c", "content": "GraphQL decouples auth from routing. Checking permissions only in your global HTTP middleware is a trap\u2014if one resolver lacks a check, you leak data.\n\nGitLab's CVE-2026-19478 (CVSS 9.4) is exactly this: unauthenticated project deletion via a bypassed resolver.", "creation_timestamp": "2026-08-19T00:40:02.165268Z"}, {"uuid": "028306ae-d3c3-4739-8aaa-04a270b3ec6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/CyberDispatch/2585", "content": "Critical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.", "creation_timestamp": "2026-08-29T20:00:05.443016Z"}, {"uuid": "76398a0a-5d4b-45f1-bc1b-4cd50ce70a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcryungao2c", "content": "CVE-2026-19478 - gitlab\nGitLab versions 18.2 to 19.2 are affected. An attacker could access and modify or delete public projects and user data without authentication. Update to a fixed version to protect against this\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlab #CVE #infosec", "creation_timestamp": "2026-08-17T22:50:04.573259Z"}, {"uuid": "fb62ca5f-90ba-40e3-9937-06a1267ffd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7x7cmjle23", "content": "~Checkpoint~\nCritical flaws, AI-assisted attacks and Cl0p exploitation drive this week\u2019s threats.\n-\nIOCs: CVE-2026-19478, CVE-2026-12569\n-\n#AIThreats #ThreatIntel #Vulnerability", "creation_timestamp": "2026-08-29T13:10:22.640588Z"}, {"uuid": "211e253d-9eb3-45b8-84cd-74bdd9b67b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.darkreading.com/application-security/critical-gitlab-zero-click-flaw-mitigation-challenges", "content": "A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.", "creation_timestamp": "2026-08-19T01:00:34.123115Z"}, {"uuid": "92de31dd-6e2c-4ae0-891f-dd26056a33f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtfljh4jrf2j", "content": "GitLab\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u304c\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u5909\u66f4\u307e\u305f\u306f\u524a\u9664\u3067\u304d\u308b\uff08CVE-2026-19478\uff09 \n\nCritical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)  #HelpNetSecurity (Aug 18)\n\nwww.helpnetsecurity.com/2026/08/18/g...", "creation_timestamp": "2026-08-19T01:32:04.208165Z"}, {"uuid": "ffbc7f99-8211-484f-994b-0414621e406f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtfphlrqnl22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-59310: 43 interactions\nCVE-2026-68820: 31 interactions\nCVE-2026-65400: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-19478: 6 interactions\nCVE-2026-43499: 6 interactions\nCVE-2025-62593: 5 interactions\n", "creation_timestamp": "2026-08-19T02:42:36.517778Z"}, {"uuid": "0b4c07ef-7c9c-4d25-9015-33a96d54e514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtnvbns6cc2q", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nGitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers to modify or delete public projects. WatchTowr researchers warn of active exploitation of critical GitLab flaw CVE-2026-194\u2026\n#hackernews #news", "creation_timestamp": "2026-08-22T08:47:57.834792Z"}, {"uuid": "a90e4746-6fbf-447b-96d6-53aa67e296b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "content": "GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data.\n\nThe flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score of 9.4.\n\nReleased on", "creation_timestamp": "2026-08-18T01:00:32.802273Z"}, {"uuid": "469765c9-4fd1-4b73-8cba-f98a9506337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kindtech.bsky.social/post/3mthrbs4p3v2m", "content": "GitLab patched CVE-2026-19478, a 9.4 severity GraphQL flaw that let unauthenticated attackers modify or delete public project and user data. Self hosted instances are often the slowest to patch, so check your deployment before the weekend. #GitLab #Security #DevOps", "creation_timestamp": "2026-08-19T22:20:28.577782Z"}, {"uuid": "e3c23624-8dd3-4f04-8e42-6cd9c61e5b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtd3kigicg2y", "content": "GitLab patched CVE-2026-19478, a CVSS 9.4 GraphQL code injection flaw letting unauthenticated users alter or delete project data.\n\n#CVE202619478 #GitLab #CodeInjection #GraphQL #CVE202619650 #PatchNow", "creation_timestamp": "2026-08-18T01:40:59.877401Z"}, {"uuid": "2a281ea2-f83c-4e36-93dd-14ec9bec66ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/rmcholewa.bsky.social/post/3mtlxsugxv72s", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-21T14:28:03.316949Z"}, {"uuid": "c6997214-faf8-4f34-8e07-0c44111c9582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cryptolab.re/post/3mtlzaakwa22i", "content": "Weekly #28 :\n\n- GitLab : CVE-2026-19478, mise \u00e0 jour prioritaire\n- Linux 7.2 et le cache-aware scheduling\n- WordPress 7.1 et le traitement local des images\n- Firefox 154 corrige 58 CVE\n- Retour sur les 7 h 47 de panne GitHub\n\ncryptolab.re/posts/2026/w...\n\n#GitLab #Linux #SelfHosting", "creation_timestamp": "2026-08-21T14:53:26.306705Z"}, {"uuid": "44cdd9fe-5cda-4b69-a9be-3540caaea75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mtlznouu2c2u", "content": "\ud83d\udea8 GitLab sous pression\n\nLa faille CVE-2026-19478, corrig\u00e9e le 17 ao\u00fbt 2026 par une mise \u00e0 jour publi\u00e9e en urgence... serait d\u00e9j\u00e0 exploit\u00e9e\n\n\u27a1\ufe0f D\u00e9couvrez l'article pour comprendre cette vuln\u00e9rabilit\u00e9 :\nwww.it-connect.fr/gitlab-cve-2...\n\n#Cybers\u00e9curit\u00e9 #GitLab", "creation_timestamp": "2026-08-21T15:00:57.413491Z"}, {"uuid": "29803bb7-1622-4a91-b015-833bf782d14b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/ob4slkn-WSHlfG8wbUuZhe2QU-kdKboFrHP2rc_qVZkNJw", "content": "", "creation_timestamp": "2026-08-19T23:00:04.976829Z"}, {"uuid": "a87db54e-4f3f-4cce-833d-0fde1297b0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mtfvrhlgpd2g", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via #GraphQL Directive\" and \"Emerging Threat: GeoServer Zero-Day SQL Injection via jsonArrayContains\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-19T04:35:30.533718Z"}, {"uuid": "10a8fcea-06d4-4d7d-b556-e424392eb4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/captainsmok3r_official/456", "content": "CVE-2026-19478 - GitLab GraphQL @ gl_introduced directive authorization bypass\nAffected: GitLab CE/EE 18.2-18.11.10, 19.0-19.0.7, 19.1-19.1.5, 19.2-19.2.3\nType: Auth bypass (unauthenticated arbitrary zero-arity Ruby method invocation)", "creation_timestamp": "2026-08-22T00:00:28.141456Z"}, {"uuid": "ac61adfe-401c-4dac-a78d-0b2eec0e8d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/457", "content": "", "creation_timestamp": "2026-08-22T00:00:28.187346Z"}, {"uuid": "7527a73a-62c0-48b6-ad0a-0536e6a594bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "Telegram/vEbmjoRYt04v0ZC0euMZdfrOphLUWqQQy7SM_HrVY46dKQ", "content": "", "creation_timestamp": "2026-08-22T00:00:28.510699Z"}, {"uuid": "dcfcd93c-1480-41e3-9556-d476f3be132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/ctinow/255488", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure\nhttps://ift.tt/ue9k2NB", "creation_timestamp": "2026-08-22T00:00:28.825023Z"}, {"uuid": "0681d6ee-7d5b-4cfc-9f11-63dedcd0bb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/12950", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-22T00:00:28.413173Z"}, {"uuid": "34ae3dbd-3436-4a67-aa22-8db4a769bb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.528717Z"}, {"uuid": "4e661d38-37b3-435d-a408-49299b9134d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/ZxcQ6RVn-5sFAZ4qkLho0f4GJRaaxyJWc-8e0k9Lah5Vjrw", "content": "", "creation_timestamp": "2026-08-18T04:00:03.778771Z"}, {"uuid": "319ef04d-e6bb-4497-adf5-6ba38f161139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtddoas2hi2s", "content": "CVE-2026-19478: GitLab Patches Critical GraphQL Flaw CVSS 9.4 for Self-Managed Instances", "creation_timestamp": "2026-08-18T04:06:15.781839Z"}, {"uuid": "0f3b859c-bc4e-423b-b985-75631c2577de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/ob4slkn-WSHlfG8wbUuZhe2QU-kdKboFrHP2rc_qVZkNJw", "content": "", "creation_timestamp": "2026-08-20T00:00:06.852417Z"}, {"uuid": "7d690c6e-8a5b-4022-b9d1-1acbb200e8f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-20T00:00:07.268190Z"}, {"uuid": "9db73ef0-5b5e-4b91-8281-3c236bc84e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtm73qa4ns2p", "content": "CVE-2026-19478: Critical GitLab GraphQL Flaw Enables Unauthenticated Data Modification\n\n", "creation_timestamp": "2026-08-21T16:38:17.764624Z"}, {"uuid": "4f4c6962-29f9-42ec-a0ca-f2afab5b893e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/bdufstecru/3390", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 git \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043d\u0430\u0434 \u043a\u043e\u0434\u043e\u043c GitLab EE/ CE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0432\u0435\u0440\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-11879\nCVE-2026-19478\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/", "creation_timestamp": "2026-08-20T00:00:28.061303Z"}, {"uuid": "ee7f0630-f809-46f4-b13b-16a13c88c9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19903", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Community Edition (CE) \u0438 Enterprise Edition (EE), \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 (9,4 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nhttps://xakep.ru/2026/08/19/cve-2026-19478/", "creation_timestamp": "2026-08-20T00:00:28.445464Z"}, {"uuid": "68a772b3-48ae-42d1-830c-e58e48572ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:02.976754Z"}, {"uuid": "92d54263-50b7-4a16-bb42-6970aa626537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "content": "A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.\n\nThe vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring", "creation_timestamp": "2026-08-22T01:00:32.488532Z"}, {"uuid": "aa4b3423-94f0-450b-b785-84bcfbe6ecec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://threatintel.cc/2026/08/21/gitlab-warns-of-active-exploitation.html", "content": "GitLab Warns of Active Exploitation of Critical GraphQL Flaw\n\nA critical GraphQL vulnerability identified as CVE-2026-19478 is currently under active exploitation, allowing unauthenticated attackers to modify or delete public projects on self-managed GitLab installations. Users are urged to patch their systems immediately by upgrading to the latest secure versions.", "creation_timestamp": "2026-08-22T01:00:32.847019Z"}, {"uuid": "c1726eaa-5952-4440-a491-4acf0c46456e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117115547555307021", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-18T08:23:56.466034Z"}, {"uuid": "08648b26-7fc3-4de9-bd42-32927ecdb9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mtdsuuqpxw27", "content": "Critical GitLab GraphQL Vulnerability CVE-2026-19478: Patch Now to Prevent Unauthenticated Project\u00a0Modification\n\nGitLab patched critical CVE-2026-19478, a CVSS 9.4 GraphQL flaw allowing unauthenticated attackers to\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-19478-gitlab-graphql-vulnerability/", "creation_timestamp": "2026-08-18T08:38:24.376399Z"}, {"uuid": "d2982d8d-4bed-4f7e-b6d4-986713d5b87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mtdu3pgedm2g", "content": "\ud83d\udce2 [VULN] GitLab - la faille qui a fait rouvrir une version morte CVE-2026-19478\n\n1) GitLab a publi\u00e9 un correctif d'urgence le 17 ao\u00fbt pour une faille CVSS 9,4 permettant de modifier ou supprimer projets publics et donn\u00e9es utilisateur sans compte ni mot de passe, affectant les\u2026\n\n#CVE #Cyberveille", "creation_timestamp": "2026-08-18T09:00:07.103650Z"}, {"uuid": "3ecf1589-7152-40b1-ae22-4c21cd90bcc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mtdu3tvmcj2s", "content": "GitLab\u304c\u7dca\u6025\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u306b\u30d1\u30c3\u30c1\u3092\u9069\u7528\n\nGitLab\u306f\u6708\u66dc\u65e5\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306a\u7dca\u6025\u5ea6\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u6b20\u9665\u3092\u542b\u30802\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 CVE-2026-19478(CVSS\u30b9\u30b3\u30a29.4)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u653b\u6483\u8005\u304cGraphQL\u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6\u3092\u4ecb\u3057\u3066\u30e6\u30fc\u30b6\u30fc\u30c7\u30fc\u30bf\u3084\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a...", "creation_timestamp": "2026-08-18T09:00:11.657127Z"}, {"uuid": "90660303-3348-4469-9bb4-173364c0e0a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117115691222589671", "content": "CRITICAL: GitLab CE/EE (v18.2+ to 19.2.4) patched CVE-2026-19478, a code injection bug allowing unauthenticated data modification/deletion via GraphQL. CSRF (CVE-2026-19650) also fixed. Upgrade to safe versions ASAP. https://radar.offseq.com/threat/gitlab-patches-critical-code-injection-vulnerability-ce00fcde61cd1cd5 #OffSeq #GitLab #Infosec #CVE", "creation_timestamp": "2026-08-18T09:00:28.928427Z"}, {"uuid": "2405b8e3-c04a-4da3-8ec2-3b177c5d1198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtdu4fzq3r2n", "content": "CVE-2026-19478: GitLab CE/EE v18.2+ to 19.2.4 hit by CRITICAL code injection. Self-managed users must upgrade now to prevent data loss. Cloud users are auto-patched. https://radar.offseq.com/threat/gitlab-patches-critical-code-injection-vulnerability-ce00fcde61cd1cd5 #OffSeq #GitLab #Security", "creation_timestamp": "2026-08-18T09:00:30.889033Z"}, {"uuid": "543d3c1e-89bc-422c-8ad4-3051c2901cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtdunvdvms23", "content": "A GitLab flaw (CVE-2026-19478, CVSS 9.4) lets someone who never logged in delete public projects and user data on self-managed servers. GitLab.com is safe. Patch self-hosted to 19.2.4, 19.1.6, 19.0.8 or 18.11.11 now.", "creation_timestamp": "2026-08-18T09:10:17.580267Z"}, {"uuid": "0ce227cb-070d-407c-b10b-52561f337211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mtgclrxooc2q", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\nGitLab has released patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication. The vulnerabilities affect GitLab Commun\u2026\n#hackernews #news", "creation_timestamp": "2026-08-19T08:24:58.336282Z"}, {"uuid": "5bc0b67b-c591-4a27-80b4-2082bdb0938b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-19T09:00:05.406596Z"}, {"uuid": "0116308b-3c60-425b-a09a-345594685ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-19478.yaml", "content": "", "creation_timestamp": "2026-08-21T00:00:06.189132Z"}, {"uuid": "5083d14d-5fb9-4e69-8ea9-0af8cef13512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-20T03:00:03.912951Z"}, {"uuid": "92c38c8b-fa3a-4443-817a-f149dc0bc9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mtmeiry6js22", "content": "The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring credentials, user", "creation_timestamp": "2026-08-21T18:15:04.593787Z"}, {"uuid": "28b7350b-1869-4022-8aaa-ba10f98960b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/oR7NLMKFgb1yCNvTgcBxelfsbAhPDwgeIo74_-eUOYy4JNw", "content": "", "creation_timestamp": "2026-08-21T00:00:08.397443Z"}, {"uuid": "bc7e039e-15f0-417f-a4f2-0213b983318f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtdyimih6z2x", "content": "\ud83e\udd16 CVE-2026-19478 (CVSS 9.4): critical GitLab CE/EE GraphQL flaw lets unauthenticated attackers modify or delete public projects and user data. Patches released\u2014update now.\nhttps://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-18T10:18:55.022402Z"}, {"uuid": "02471820-f2ba-4dd7-bc4e-71ff4ecdcb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/kindtech.bsky.social/post/3mtican4ylu2g", "content": "GitLab patched CVE-2026-19478, a 9.4 severity GraphQL flaw that let unauthenticated attackers modify or delete public project and user data. Self hosted instances are often the slowest to patch, so check your deployment before the weekend. #GitLab #Security #DevOps", "creation_timestamp": "2026-08-20T03:24:03.505291Z"}, {"uuid": "492f12cb-f18c-4552-b02d-59bdfa7658f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19903", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitLab \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f Community Edition (CE) \u0438 Enterprise Edition (EE), \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 (9,4 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435.\n\nhttps://xakep.ru/2026/08/19/cve-2026-19478/", "creation_timestamp": "2026-08-19T10:00:03.387383Z"}, {"uuid": "a76db5b6-e5a6-4897-992f-d4491c7574bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mtie2v3ymn2s", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-60702) Oracle WebLogic Server Takeover via T3 and IIOP\" and \"Emerging Threat: (CVE-2026-19478) GitLab Unauthenticated Project Deletion via #GraphQL Directive\".\n \n#cybersecurity #AttackSurfaceManagement https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-20T03:56:38.028257Z"}, {"uuid": "7abfe94c-a56e-4349-9553-57f2d066da4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/117116166005620531", "content": "Las \u00faltimas 24 horas en seguridad inform\u00e1tica revelan una grave falla en GitLab que permit\u00eda borrar proyectos p\u00fablicos sin autenticaci\u00f3n, vulnerabilidades cr\u00edticas en sanitizaci\u00f3n web con DOMPurify, riesgos internos por accesos activos a exempleados, sofisticados ataques hardware en Windows 11 y soluciones SASE para proteger IA y redes. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff18/08/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd0d INVESTIGACI\u00d3N DE VULNERABILIDADES EN IA\n\u00danete a una comunidad activa en Discord dedicada a la investigaci\u00f3n en seguridad aplicada a modelos de lenguaje (LLMs). Aqu\u00ed se comparten t\u00e9cnicas avanzadas de bug bounty, red teaming y herramientas para escaneo autom\u00e1tico, ideales para profesionales que buscan innovar en la protecci\u00f3n contra amenazas basadas en inteligencia artificial. Descubre m\u00e1s sobre esta red especializada en seguridad IA \ud83d\udc49 https://djar.co/wxUdaF\n\u26a0\ufe0f GRAVE FALLA EN GITLAB GRAPHQL PUEDE PERMITIR BORRADO DE PROYECTOS P\u00daBLICOS\nGitLab ha parcheado la vulnerabilidad CVE-2026-19478, con una puntuaci\u00f3n CVSS de 9.4, que expon\u00eda a proyectos p\u00fablicos a modificaciones o eliminaciones sin necesidad de autenticaci\u00f3n. Esta falla en su API GraphQL resalta la importancia cr\u00edtica de mantener actualizadas las plataformas colaborativas para evitar interrupciones y p\u00e9rdidas de informaci\u00f3n. Inf\u00f3rmate sobre esta alerta y c\u00f3mo proteger tus proyectos \ud83d\udc49 https://djar.co/AbJK\n\ud83d\udd10 PELIGRO DE CUENTAS ACTIVAS DE EXEMPLEADOS EN SEGURIDAD CORPORATIVA\nEl mantenimiento de accesos para exempleados representa un riesgo considerable: facilita fraudes, fugas de datos y ataques internos. Este problema com\u00fan en empresas requiere procesos rigurosos de desactivaci\u00f3n y auditor\u00eda constante para evitar brechas que comprometan informaci\u00f3n sensible. Aprende las mejores pr\u00e1cticas para mitigar esta amenaza interna \ud83d\udc49 https://djar.co/NqXQcu\n\u2601\ufe0f CLOUD FLARE ONE: LA PLATAFORMA SASE PARA PROTEGER IA Y REDES\nCloudflare One ofrece una soluci\u00f3n integral SASE (Secure Access Service Edge) que centraliza la seguridad y conectividad para equipos, agentes de inteligencia artificial e infraestructura. Su arquitectura de confianza cero facilita una adopci\u00f3n segura y eficiente en entornos h\u00edbridos y en la nube, clave para organizaciones que integran IA en sus operaciones. Conoce c\u00f3mo esta plataforma puede fortalecer tu seguridad TI \ud83d\udc49 https://djar.co/0Wizt1\n\ud83d\udee1\ufe0f VULNERABILIDAD EN DOMPURIFY PERMITE BYPASS EN SAFARI\nUna falla en DOMPurify versi\u00f3n 3.2.6 y anteriores habilita un bypass de seguridad en navegadores Safari mediante el uso del elemento animateTransform de SMIL. DOMPurify es esencial para la sanitizaci\u00f3n de contenido en la web, por lo que esta vulnerabilidad puede abrir puertas a ataques XSS si no se parchea a tiempo. Descubre los detalles t\u00e9cnicos y recomendaciones para proteger tus aplicaciones \ud83d\udc49 https://djar.co/mLCdY\n\ud83d\udcbb SECUESTRO DE TABLAS IDT EN WINDOWS 11 MEDIANTE DATA ONLY GADGETS\nSe ha demostrado que la t\u00e9cnica DOG (Data Only Gadgets) puede atacar la tabla IDT del procesador en Windows 11, una estructura cr\u00edtica que controla la ejecuci\u00f3n de instrucciones del CPU. Este avance en el secuestro de tablas del n\u00facleo, que afecta mecanismos de seguridad como VBS, HVCI y kCET, subraya la constante evoluci\u00f3n de las amenazas a nivel hardware y la necesidad de medidas avanzadas en defensa de sistemas operativos modernos. Profundiza en esta investigaci\u00f3n y sus implicaciones \ud83d\udc49 https://djar.co/gRJVL", "creation_timestamp": "2026-08-18T11:01:13.317342Z"}, {"uuid": "ebc6cb66-5b19-49af-99b3-7e9b514759dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mte4hxk54722", "content": "\ud83d\udce2 GitLab : patch critique corrigeant une injection de code via GraphQL (CVE-2026-19478, CVSS 9.4)\n\nLe 17 ao\u00fbt 2026, GitLab a publi\u00e9 des versions correctives pour ses \u00e9ditions Community (CE) et Enterprise (EE) : 19.2.4, 19.1.6, 19.0.8\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#GitLab #GraphQL #Cyberveille", "creation_timestamp": "2026-08-18T11:30:07.961286Z"}, {"uuid": "67ac5e6a-88be-4339-89b2-74154ae93491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-21T00:00:12.036887Z"}, {"uuid": "df9bbfc5-0308-4287-9658-6fdb8ca19603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mte5dizb2k2e", "content": "GitLab\u306b\u91cd\u5927\u306a\u6b20\u9665\u3001\u653b\u6483\u8005\u304c\u516c\u958b\u30d7\u30ed\u30b8\u30a7\u30af\u30c8\u3092\u6539\u3056\u3093\u30fb\u524a\u9664\u53ef\u80fd\u306b(CVE-2026-19478)\n\nGitLab\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u60aa\u7528\u53ef\u80fd\u306a\u6df1\u523b\u5ea6\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306e\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u6b20\u9665\u3092\u542b\u3080\u30012\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306f\u3001GitLab Community Edition(CE)\u304a\u3088\u3073Enterprise Edition(EE)\u306e\u30d0\u30fc\u30b8\u30e7\u30f318.2\u304b\u308918.11....", "creation_timestamp": "2026-08-18T11:45:32.215520Z"}, {"uuid": "43d5fc42-3097-4215-82fe-f5f18640c5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mte5wfnbok2v", "content": "Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/08/18/g...\n\n#CVE #vulnerability #cybersecurity", "creation_timestamp": "2026-08-18T11:56:10.158718Z"}, {"uuid": "1b9e0e80-a1d8-4ce7-92a6-7b6f5a4d98f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/m_mWdLfn7AzxtutPwUwFotcuCU2as0PFXRgnVVXbxrPnDrU", "content": "", "creation_timestamp": "2026-08-18T12:00:03.184034Z"}, {"uuid": "80c61fab-b2bd-4ae4-a885-15605f3dd97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mte6wf3vue2m", "content": "GitLab released security updates on August 17, 2026, addressing a critical vulnerability (CVE-2026-19478) allowing unauthenticated attackers to delete public projects in its CE and EE software, rated CVSS 9.4. Affected versions include 18.2 to 18.11.11, 19.0 to 19.0.8, 19.1 to 19.1.6, and 19.", "creation_timestamp": "2026-08-18T12:14:01.027415Z"}, {"uuid": "31d642e7-c14c-4866-babe-ca0196b6d8ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mte6oqsfpa2i", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:43.150747Z"}, {"uuid": "41c27f4c-729e-4a9e-8a9a-132399dd395f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117116435366356396", "content": "CVE-2026-19478 - Critical unauthenticated data tampering in GitLab CE/EE. Remote modify/delete of public projects via GraphQL. CVSS 9.4. No patch yet. Harden access & monitor. #CVE #GitLab #infosec\nhttps://www.valtersit.com/cve/CVE-2026-19478/", "creation_timestamp": "2026-08-18T12:09:44.383313Z"}, {"uuid": "5670a828-02a2-4216-b847-4f08bca43fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117139525002330094", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore.  (See also: people who run websites usually don't understand the concept of the World Wide Web)\nCase in point:The recent GitLab CVE-2026-19478 and CVE-2026-19650\nOut of the three references, one of them simply doesn't exist, and one of them is hidden behind a login requirement, after which you're told that you cannot access it.\nWhy wait for references to age out over time when you can make them worthless right at publication time?  \ud83d\ude02", "creation_timestamp": "2026-08-22T14:01:45.140728Z"}, {"uuid": "5e6730f1-1d58-4632-a876-823a77181444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mtogt64ztiy2", "content": "We all know that CVE references age over time, and eventually none of the references exist anymore. (See also: people who run websites usually don't understand the concept of the World Wide Web)\n\nCase in point:\nThe recent GitLab CVE-2026-19478 and [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-08-22T14:05:56.245218Z"}, {"uuid": "e75b3252-2f63-4c2e-9978-6d42090ced58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/xakep_ru/19945", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 GitLab \u0443\u0436\u0435 \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 \u0432 GitLab, \u043f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0431\u0430\u0433\u0435.\n\nhttps://xakep.ru/2026/08/26/gitlab-attacks/", "creation_timestamp": "2026-08-26T13:00:03.411654Z"}, {"uuid": "b8f0ceff-7cbf-4ee3-b2cf-04dbb53662cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtonsnhseq2v", "content": "GitLab's 'Future Field' Security Feature Turns Weapon: Emergency Patches for CVE-2026-19478", "creation_timestamp": "2026-08-22T16:07:00.089272Z"}, {"uuid": "5a8d6594-afc5-4442-a6d7-2f354fb4e30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/DP79lFx68QWQ614S8M8RHa50ZKS9vH8rAQGB16GYh--ECJk", "content": "", "creation_timestamp": "2026-08-22T17:00:04.492827Z"}, {"uuid": "4122f6bd-a23d-48ca-8256-99819a57165b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.cert.se/2026/08/cert-se-veckobrev-v35.html", "content": "", "creation_timestamp": "2026-08-28T12:45:10.413848Z"}, {"uuid": "8f528aed-3f23-495c-8607-1fd0556e64ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99211", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitlab-CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a punitdarji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 12:21:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitlab-CVE-2026-19478\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.857391Z"}, {"uuid": "f4d5ab39-d974-4daf-8616-eead333cf6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/98977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a n0xdaemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 20:33:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478: GitLab GraphQL Vulnerability PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:05.048611Z"}, {"uuid": "ef2e5b47-fff6-4f40-a4be-4f017297043a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/98582", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a davkharrr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 07:23:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:06.756577Z"}, {"uuid": "eb898813-1779-4438-8c11-daa6cf577875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-22T19:00:10.310749Z"}, {"uuid": "e8a1e7ef-32c1-4841-885c-9eca9de01df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mtp3457wqk2j", "content": "GitLab CVE-2026-19478 is under active exploitation days after disclosure.\n\nIf GitLab sits in your build chain, patching is now incident response.\n\n#ThreatIntel #CyberSecurity\n\nhttps://threat-intelligence.redeyesecurity.com/blog/gitlab-cve-2026-19478-active-exploitation-2026", "creation_timestamp": "2026-08-22T20:04:55.066920Z"}, {"uuid": "98ff28bb-377a-4617-b569-a8dc3b36b91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.596606Z"}, {"uuid": "bee8ad29-1b5f-497d-937d-823b40c0fb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98582", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a davkharrr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-18 07:23:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:10.858683Z"}, {"uuid": "6a14bbf0-579c-4c79-9887-0db0df402e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98977", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a n0xdaemon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-20 20:33:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-19478: GitLab GraphQL Vulnerability PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.334022Z"}, {"uuid": "eac286ee-1f95-44cf-993a-c91e4e172acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99211", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Gitlab-CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a punitdarji\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 12:21:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitlab-CVE-2026-19478\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.493124Z"}, {"uuid": "71151317-bc67-4acd-a866-6042a0b8a52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-23T00:00:33.775089Z"}, {"uuid": "a7c67153-a927-4711-b52f-3fc62a6556b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/24147", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-08-23T00:00:44.202688Z"}, {"uuid": "e7bb1bb1-8109-4ebb-8880-e1629fbde268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "Telegram/DP79lFx68QWQ614S8M8RHa50ZKS9vH8rAQGB16GYh--ECJk", "content": "", "creation_timestamp": "2026-08-23T00:00:36.528900Z"}, {"uuid": "26163e20-1199-4a0a-bec5-ade4d7a4a0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.426937Z"}, {"uuid": "a47be1cb-8eca-4123-806c-2b5c7cd0ade4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mu34gfolxs2b", "content": "\ud83d\udfe2 Hackers Are Already Exploiting a Critical GitLab Vulnerability\n\n\ud83d\udde8\ufe0f Researchers at watchTowr reported that hackers have begun exploiting the critical GitLab vulnerability CVE-2026-19478 in\u2026\n\n#news", "creation_timestamp": "2026-08-27T15:00:33.862685Z"}, {"uuid": "9e6b99d0-1866-48f4-b8ed-608ca55e3bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.850963Z"}, {"uuid": "5be52c9b-2c86-4128-b97b-fa0a847b306e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitLab Code injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:58.432252Z"}, {"uuid": "2ae3af6b-9f85-496b-808d-488bb9a9a161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/kasperskyb2b/2295", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b Armored Likho, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0442\u0440\u0451\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 BusySnake RAT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 open source, Kharon, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441 AdaptixC2. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c C2 \u043f\u0435\u0440\u0435\u0435\u0445\u0430\u043b\u0438 \u0441 Telegram Bot API \u043d\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 CI/CD-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430\u0445 GitLab, \u0430 \u0441\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0432 \u043a\u043e\u0434\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\ud83d\udd0e \u041a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 UAT-10147 \u0432\u0441\u0442\u0440\u043e\u0438\u043b \u0430\u0433\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0418\u0418 \u0432 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u0418\u0418 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0432\u0435\u0436\u0438\u043c\u0438 \u0431\u0430\u0433\u0430\u043c\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Linux, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c QuasarRAT, Gh0stCringe, NoodleRAT \u0438 Meterpreter \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u043c\u0435\u0434\u0438\u0430, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438 \u0438\u0433\u0440\u043e\u0432\u043e\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0411\u043e\u043b\u0438\u0432\u0438\u0438, \u041a\u0438\u0442\u0430\u0435, \u041a\u0430\u043d\u0430\u0434\u0435 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\ud83c\udf1a \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 Rust crate \u043d\u0430 crates.io, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 arrayref, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0410\u0442\u0430\u043a\u0430 \u0434\u043b\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e 23 \u043c\u0438\u043d\u0443\u0442\u044b, \u043d\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0442\u0440\u0451\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044f\u0445 \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f Rust. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Sapphire Sleet.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Ransom Busters LTD \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0444\u0430\u043a\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u0441\u0443\u043c\u043c\u0443 \u043e\u0442 $20000 \u0434\u043e $60000. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u0442\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435.\n\n\u2757\ufe0f \u0420\u0435\u0434\u043a\u0438\u0439 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u2014 \u0412\u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u043b\u043e\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043a\u043e\u043d\u0435\u0447\u043d\u043e, Android). \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u0438\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 MQTT-\u0431\u0440\u043e\u043a\u0435\u0440. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c (!) \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0430\u0432\u0442\u043e \u0432 \u0441\u0435\u0442\u044c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 MoYu Group \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 BADBOX.\n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0433\u0440\u0443\u043f\u043f\u044b GOFFEE/Paper Werewolf. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u044b 7-Zip \u0438 Git \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u041f\u041e \u043d\u0430 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 ISO-\u043e\u0431\u0440\u0430\u0437\u0430 Windows.\n\n\ud83d\udfe2\u0410\u043d\u0430\u043b\u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android, DragonDoll. \u041e\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome, \u0441 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u043d\u0430 34 \u044f\u0437\u044b\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u044e, \u0411\u043b\u0438\u0436\u043d\u0438\u0439 \u0438 \u0414\u0430\u043b\u044c\u043d\u0438\u0439 \u0412\u043e\u0441\u0442\u043e\u043a \u0438 \u0410\u0444\u0440\u0438\u043a\u0443. \n\n\ud83c\udd94 \u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430. \u041e\u043d \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c passkey \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0435, \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u0447\u0451\u0442\u043a\u0438 Google, Microsoft, iCloud \u0438 LinkedIn. \u0414\u043e\u0441\u0442\u0443\u043f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0441\u0441\u0438\u0439, \u0430 \u043e\u0442\u0437\u044b\u0432 passkey \u043f\u043e\u043a\u0430 \u0432\u043e\u0448\u0451\u043b \u043d\u0435 \u0432\u043e \u0432\u0441\u0435 \u043f\u043b\u0435\u0439\u0431\u0443\u043a\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0438\u0437 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044f \u044d\u043a\u0440\u0430\u043d \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 Windows.\n\n\ud83d\udd35\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u043d\u0430\u0447\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 RubyGems, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430\u0441\u044c \u043d\u0430 npm: \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 Windows-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 StubMaker. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0445\u0443\u043a\u0438 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043d\u0438 \u0440\u0430\u0437\u0443 \u043d\u0435 \u0431\u044b\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u044f\u0434\u043d\u044b\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 \u043d\u0430 Go.\n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 (CVSS 9.4) \u0432 GitLab CE \u0438 EE. \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 GraphQL directive, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 merge. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-25T00:00:24.318302Z"}, {"uuid": "3c88d3d5-bd16-4dea-8d64-535bb91195e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mtqaluyhd22g", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure thehackernews.com/2026/08/gitl...", "creation_timestamp": "2026-08-23T07:15:53.739998Z"}, {"uuid": "199b9485-4508-48db-b6c4-2ce27d003e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtusc5aguv2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-69836: 43 interactions\nCVE-2026-73570: 21 interactions\nCVE-2026-19478: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-73570: 15 interactions\nCVE-2026-77995: 6 interactions\nCVE-2026-18963: 4 interactions\n", "creation_timestamp": "2026-08-25T02:43:10.795000Z"}, {"uuid": "042080dc-7541-4dc9-96f5-15572728ee58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/xakep_ru/19945", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 GitLab \u0443\u0436\u0435 \u0432\u0437\u044f\u043b\u0438 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 watchTowr \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-19478 \u0432 GitLab, \u043f\u0440\u0438\u0447\u0435\u043c \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0431\u0430\u0433\u0435.\n\nhttps://xakep.ru/2026/08/26/gitlab-attacks/", "creation_timestamp": "2026-08-27T00:00:10.110671Z"}, {"uuid": "48e3eb3e-172e-49ae-aa57-63936f9f73d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-gitlab", "content": "", "creation_timestamp": "2026-08-25T04:45:03.981659Z"}, {"uuid": "995078c7-0aba-4629-a7a4-66aeb5a612e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtqx7ehwoa22", "content": "Critical GitLab vulnerability CVE-2026-19478 lets unauthenticated attackers delete public projects. It is exploited in the wild with public PoC.\n\n#GitLab #CVE202619478 #Vulnerability #InfoSec #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-23T14:00:27.481605Z"}, {"uuid": "e4b7abb1-66c1-4f2c-b25c-a6cb12b693c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-827", "content": "", "creation_timestamp": "2026-08-28T16:45:02.966909Z"}, {"uuid": "11cd417e-c748-410d-b8d3-98b40fb6e8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mtr6zm4tbb2a", "content": "GitLab security advisory (AV26\n\nThis article focuses heavily on patching specific GitLab versions, but it frames a critical zero-day exploit with CVE-2026-19478 as a generalized risk across all listed versions. The real risk lies in the fact that if the exploitation vector targets underlying dep\u2026", "creation_timestamp": "2026-08-23T16:20:24.087279Z"}, {"uuid": "80aa5b96-85a8-4488-bd8d-4f8edb5178e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mtrjoba32b23", "content": "A new GitLab flaw (CVE-2026-19478, CVSS 9.4) is actively exploited, allowing attackers to modify or delete public projects without authentication. Stay alert and update immediately.", "creation_timestamp": "2026-08-23T19:30:54.719037Z"}, {"uuid": "f5a99027-2a08-4339-9472-aadf891af4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9865", "content": "\ud83d\udd3b Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.\n\nRunning self-hosted GitLab? Patch now: https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-23T20:00:05.950706Z"}, {"uuid": "5f544e9d-2bd7-4564-87f4-f5e3ccb00564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9823", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\n\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-23T20:00:06.008189Z"}, {"uuid": "bd79b243-cc75-4410-ad7e-4065b54e10f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mtrpztd7p62c", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-08-23T21:24:45.564990Z"}, {"uuid": "39d8c4af-e305-45df-861a-e433f206d7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/cibsecurity/90544", "content": "\ud83d\udd8b\ufe0f GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \ud83d\udd8b\ufe0f\n\nA newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.  The vulnerability in question is CVE202619478 CVSS score 9.4, a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-08-24T00:00:04.218182Z"}, {"uuid": "0ed91806-e0a5-4716-9a8a-7f856d9468df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/thehackernews/9823", "content": "\u203c\ufe0fCritical GitLab vulnerability could let unauthenticated attackers delete public projects.\n\nCVE-2026-19478 affects self-managed CE and EE under certain conditions. Fixes are in 19.2.4, 19.1.6, 19.0.8, and 18.11.11.\n\nWhat admins need to know: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html", "creation_timestamp": "2026-08-24T00:00:07.047927Z"}, {"uuid": "5d5b1a5f-f524-4bf0-9a02-5d919e650a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/thehackernews/9865", "content": "\ud83d\udd3b Attackers are exploiting a GitLab flaw days after disclosure.\n\nCVE-2026-19478 lets unauthenticated attackers modify or delete public projects and rewrite their data under certain conditions. watchTowr says it saw in-the-wild exploitation against its honeypots.\n\nRunning self-hosted GitLab? Patch now: https://thehackernews.com/2026/08/gitlab-cve-2026-19478-comes-under.html", "creation_timestamp": "2026-08-24T00:00:07.155602Z"}, {"uuid": "6f7e3c8e-7d9d-4a1e-989f-5bd47b9c453f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/information_security_channel/55770", "content": "Critical GitLab Flaw Exploited Shortly After Disclosure\nhttps://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/\n\nCVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.\nThe post Critical GitLab Flaw Exploited Shortly After Disclosure (https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-24T00:00:09.276424Z"}, {"uuid": "2d0538c4-0305-4a0e-94f1-399df64fe45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mu2ewteicl2w", "content": "GitLab patched a critical bug Aug 17. Researchers exploited it within MINUTES, not days. CVE-2026-19478 (CVSS 9.4): unauth code injection deletes projects. Patch now or block /api/graphql. \n\n\ud83c\uddec\ud83c\udde7  diesec.com/2026/08/gitl...\n\ud83c\udde9\ud83c\uddea  diesec.com/de/2026/08/g... \n\n#GitLab #CyberSecurity", "creation_timestamp": "2026-08-27T08:00:17.774014Z"}, {"uuid": "3dedfa6a-ddad-458d-8a2a-770183776f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/kasperskyb2b/2295", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b Armored Likho, \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0442\u0440\u0451\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 BusySnake RAT, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u043e\u044f\u043d\u0446\u0430 open source, Kharon, \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441 AdaptixC2. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c C2 \u043f\u0435\u0440\u0435\u0435\u0445\u0430\u043b\u0438 \u0441 Telegram Bot API \u043d\u0430 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 CI/CD-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430\u0445 GitLab, \u0430 \u0441\u0430\u043c\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u2014 \u0432 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0410\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u0432 \u043a\u043e\u0434\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\ud83d\udd0e \u041a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 UAT-10147 \u0432\u0441\u0442\u0440\u043e\u0438\u043b \u0430\u0433\u0435\u043d\u0442\u0441\u043a\u0438\u0439 \u0418\u0418 \u0432 \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u0418\u0418 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0432\u0435\u0436\u0438\u043c\u0438 \u0431\u0430\u0433\u0430\u043c\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Linux, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c QuasarRAT, Gh0stCringe, NoodleRAT \u0438 Meterpreter \u043f\u0440\u043e\u0442\u0438\u0432 \u0446\u0435\u043b\u0435\u0439 \u0432 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u0435, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0438, \u043c\u0435\u0434\u0438\u0430, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0438 \u0438\u0433\u0440\u043e\u0432\u043e\u0439 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u0438 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0411\u043e\u043b\u0438\u0432\u0438\u0438, \u041a\u0438\u0442\u0430\u0435, \u041a\u0430\u043d\u0430\u0434\u0435 \u0438 \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435.\n\n\ud83c\udf1a \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 Rust crate \u043d\u0430 crates.io, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 arrayref, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \u0410\u0442\u0430\u043a\u0430 \u0434\u043b\u0438\u043b\u0430\u0441\u044c \u0432\u0441\u0435\u0433\u043e 23 \u043c\u0438\u043d\u0443\u0442\u044b, \u043d\u043e \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0442\u0440\u0451\u0445 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u044f\u0445 \u0441\u0440\u0435\u0434, \u0433\u0434\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f Rust. \u0418\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0430\u0442\u0430\u043a\u0438 \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Sapphire Sleet.\n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Ransom Busters LTD \u0440\u0430\u0441\u0441\u044b\u043b\u0430\u0435\u0442 \u043f\u0438\u0441\u044c\u043c\u0430 \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0444\u0430\u043a\u0442 \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u0430 \u0441\u0443\u043c\u043c\u0443 \u043e\u0442 $20000 \u0434\u043e $60000. \u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e \u0442\u0435 \u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435.\n\n\u2757\ufe0f \u0420\u0435\u0434\u043a\u0438\u0439 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u2014 \u0412\u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u043b\u043e\u0432\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 (\u043a\u043e\u043d\u0435\u0447\u043d\u043e, Android). \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u0438\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 MQTT-\u0431\u0440\u043e\u043a\u0435\u0440. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432 \u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c (!) \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0442 \u0430\u0432\u0442\u043e \u0432 \u0441\u0435\u0442\u044c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 MoYu Group \u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439 BADBOX.\n\n\ud83d\udd35\u041d\u043e\u0432\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0433\u0440\u0443\u043f\u043f\u044b GOFFEE/Paper Werewolf. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u044b 7-Zip \u0438 Git \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u041f\u041e \u043d\u0430 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0431\u043e\u0440\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 ISO-\u043e\u0431\u0440\u0430\u0437\u0430 Windows.\n\n\ud83d\udfe2\u0410\u043d\u0430\u043b\u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f Android, DragonDoll. \u041e\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Google Chrome, \u0441 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u043d\u0430 34 \u044f\u0437\u044b\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u044e, \u0411\u043b\u0438\u0436\u043d\u0438\u0439 \u0438 \u0414\u0430\u043b\u044c\u043d\u0438\u0439 \u0412\u043e\u0441\u0442\u043e\u043a \u0438 \u0410\u0444\u0440\u0438\u043a\u0443. \n\n\ud83c\udd94 \u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430. \u041e\u043d \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c passkey \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u0435, \u0430\u0442\u0430\u043a\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u0447\u0451\u0442\u043a\u0438 Google, Microsoft, iCloud \u0438 LinkedIn. \u0414\u043e\u0441\u0442\u0443\u043f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0441\u0441\u0438\u0439, \u0430 \u043e\u0442\u0437\u044b\u0432 passkey \u043f\u043e\u043a\u0430 \u0432\u043e\u0448\u0451\u043b \u043d\u0435 \u0432\u043e \u0432\u0441\u0435 \u043f\u043b\u0435\u0439\u0431\u0443\u043a\u0438 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u043e\u0433\u043e \u0412\u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0438\u0437 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u043d\u0430 \u043c\u043d\u043e\u0433\u0438\u0445 \u044f\u0437\u044b\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u044b\u043c\u0430\u043d\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044f \u044d\u043a\u0440\u0430\u043d \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 Windows.\n\n\ud83d\udd35\u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u0439\u043f\u0441\u043a\u0432\u043e\u0442\u0442\u0438\u043d\u0433\u0430, \u043d\u0430\u0447\u0430\u0432\u0448\u0430\u044f\u0441\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 RubyGems, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430\u0441\u044c \u043d\u0430 npm: \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 Windows-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 StubMaker. \u0418\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0445\u0443\u043a\u0438 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0430\u043a\u0435\u0442 \u043d\u0438 \u0440\u0430\u0437\u0443 \u043d\u0435 \u0431\u044b\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d, \u0432 \u0438\u0442\u043e\u0433\u0435 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u0441\u0435\u044f\u0434\u043d\u044b\u0439 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440 \u043d\u0430 Go.\n\n\ud83d\udfe0\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 (CVSS 9.4) \u0432 GitLab CE \u0438 EE. \u0414\u0435\u0444\u0435\u043a\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 GraphQL directive, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 merge. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-24T10:00:03.796517Z"}, {"uuid": "2e25f63c-d20c-460d-b6e2-68e914ba7b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/GithubRedTeam/99908", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-19478\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EQSTLab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 06:47:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nGitLab Code injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T10:00:03.352045Z"}, {"uuid": "ab5cde3b-0220-481a-a5f7-48ebfc62991f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "seen", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-02T18:00:05.396549Z"}, {"uuid": "021ff731-87eb-48fa-9f6e-05ad95e6f9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3607", "content": "CVE-2026-19478 \u2014 GitLab\n*\n A/B lab + safe PoC", "creation_timestamp": "2026-09-03T00:00:40.449984Z"}, {"uuid": "f7ec0058-dd04-42b3-ab60-356a7e5531b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-04T17:00:05.678109Z"}, {"uuid": "e62f2fe8-c75d-4ee5-9dab-ddb7ef80ea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19478", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/14767", "content": "GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure \u2013 thehackernews.com\n\nFri, 21 Aug 2026 15:04:25", "creation_timestamp": "2026-09-05T01:00:21.657794Z"}, {"uuid": "b410f5a1-fef7-4438-8f8d-4705f09922d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19478", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mutozexru32p", "content": "\ud83d\udccc GitLab Releases Critical Security Updates for GraphQL API Vulnerability (CVE-2026-19478) https://www.cyberhub.blog/article/30817-gitlab-releases-critical-security-updates-for-graphql-api-vulnerability-cve-2026-19478", "creation_timestamp": "2026-09-06T09:37:08.078368Z"}]}