Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
CVE-2026-19478: Critical GitLab GraphQL Flaw Enables Unauthenticated Data Modification
Excerpt
GitLab has released an emergency security update addressing a critical vulnerability that can allow an unauthenticated remote attacker to modify or delete public projects and user data. Tracked as CVE-2026-19478, the flaw affects both GitLab Community Edition (CE) and Enterprise Edition (EE) and carries a CVSS score of 9.4. The vulnerability stems from a code injection issue involving a GraphQL directive. According to GitLab’s CVSS assessment, exploitation can be…
Read the original report →Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-19478 | High | Score 68/100 | First seen |
| CVE | CVE-2026-19650 | Medium | Score 58/100 | First seen |
| CVE | CVE-2026-14266 | High | Score 79/100 | First seen |
IOC Relationship Graph
Building graph…