Critical GitLab GraphQL Flaw CVE-2026-19478 Allows Unauthenticated Project Deletion
GitLab has released emergency security updates to address a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) that could…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-19478 — Vulnerability brief
CVE-2026-19478 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
GitLab High-Severity CSRF in GraphQL Multiplex Query Handler
A high-severity CSRF vulnerability in GitLab's GraphQL multiplex query handler could allow unauthenticated users to execute mutations via GET requests due to…
CVE-2026-71472 — Critical vulnerability brief
CVSS 9.1A flaw was found in acm-search-v2-rhel9. This vulnerability allows an authenticated attacker, such as a hub administrator or a Search Custom Resource…
Critical Forminator WordPress Flaw Allows Unauthenticated RCE via Malicious PHP Uploads
A critical vulnerability has been disclosed in the Forminator Forms WordPress plugin, which has over 600,000 active installations. Tracked as CVE-2026-15748 and…
CVE-2026-15748 — Vulnerability brief
CVE-2026-15748 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-15826 — Vulnerability brief
CVE-2026-15826 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-70465 — Vulnerability brief
CVE-2026-70465 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-65640: WordPress Core Postscript RCE
High-severity WordPress core vulnerability enabling remote code execution via malicious Postscript file upload by Author-level users. Affects versions 4.7 to 7.0. Patched…
CVE-2026-20337 — Vulnerability brief
CVE-2026-20337 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…