Critical GitLab GraphQL Flaw Allows Unauthenticated Project Deletion
A critical vulnerability in GitLab CE/EE allows unauthenticated attackers to remotely modify or delete public projects and user data via a GraphQL…
Tag: critical
CVE-2026-17482 — Critical vulnerability brief
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
CVE-2026-73533 — Critical vulnerability brief
Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server.…
CVE-2026-53791 — Critical vulnerability brief
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending…
CVE-2026-73268 — Critical vulnerability brief
A flaw was found in the cluster-curator-controller component of multicluster engine (MCE). A tenant with create or update permissions on ClusterCurator resources…
CVE-2026-17276 — Critical vulnerability brief
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the…
CVE-2026-16860 — Critical vulnerability brief
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search…
CVE-2026-73032 — Critical vulnerability brief
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from…
CVE-2026-71991 — Critical vulnerability brief
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the TelnetSSH function used for Telnet configuration that allows…
CVE-2026-71986 — Critical vulnerability brief
MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the dmz function that allows remote attackers to execute…