<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>Cve-2026-19478 on it-learn.io | IT, Networking &amp; Cybersecurity Blog</title><link>https://blog.it-learn.io/tags/cve-2026-19478/</link><description>Recent content in Cve-2026-19478 on it-learn.io | IT, Networking &amp; Cybersecurity Blog</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 18 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.it-learn.io/tags/cve-2026-19478/index.xml" rel="self" type="application/rss+xml"/><item><title>GitLab Unauthenticated RCE — CVE-2026-19478 CVSS 9.4</title><link>https://blog.it-learn.io/posts/2026-08-18-gitlab-unauthenticated-rce-cve-2026-19478-cvss-9-4/</link><pubDate>Tue, 18 Aug 2026 00:00:00 +0000</pubDate><author>it-learn.io</author><guid>https://blog.it-learn.io/posts/2026-08-18-gitlab-unauthenticated-rce-cve-2026-19478-cvss-9-4/</guid><description>A CVSS 9.4 unauthenticated RCE in GitLab CE/EE via GraphQL API threatens CI/CD supply chains. CISA confirms ransomware gangs weaponizing a Windows Task Host privilege-escalation flaw. The City Forum campaign scrapes 3.6M Azure account records from misconfigured Salesforce and ServiceNow portals. Plus Fortinet acquires Virtue AI, a CVSS 9.8 WordPress plugin flaw, and Evooo1Bot turns edge devices into proxy infrastructure.</description><media:content url="https://blog.it-learn.io/images/posts/newsletter-default/banner.png" medium="image"/></item></channel></rss>