GitLab CVE-2026-19478 vulnerability lets unauthenticated attackers delete public projects. Exploited in the wild with public PoC. Patch now.

Related Posts:

• CVE-2026-14669: PoC Code Enables RCE in PostgreSQL
• TP-Link Fixes Three High-Severity TL-MR6400 Router Flaws
• CVE-2026-74480 (CVSS 9.8): Linux Kernel Privilege Escalation PoC Public

The post CVE-2026-19478: GitLab Flaw Exploited in the Wild, PoC Public appeared first on Daily CyberSecurity.

Seven Spring GraphQL vulnerabilities were patched on August 20, including CVE-2026-59285, an unsafe deserialization flaw that can lead to remote code execution.

Related Posts:

• RDK-B WebUI Vulnerabilities Let Attackers Bypass Login
• CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak
• CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

The post Spring GraphQL Vulnerabilities: Seven Flaws Patched, One Enables RCE appeared first on Daily CyberSecurity.

CVE-2026-5423 is a Neo4j GraphQL authentication bypass letting unauthenticated clients forge JWT claims and read subscription data.

Related Posts:

• CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw
• CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day
• Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public

The post CVE-2026-5423: Authentication Bypass Hits Neo4j GraphQL Subscriptions appeared first on Daily CyberSecurity.