CVE-2026-19478 | MeGitLab CE/EE GraphQL Directive Code Injection Vulnerability
CVE-2026-19478 is a critical GitLab GraphQL code injection vulnerability that can allow unauthenticated attackers to modify or delete public projects and user data.
Horizon3
Offense Informs Defense
Live Last read · last published · next check
Latest posts
Building Capacity and Resilience for U.S. Partners
Explore how cyber diplomacy can become an operational capability that helps governments and partners reduce exploitable risk and strengthen resilience across shared ecosystems.
CTEM: From Visibility to Measurable Risk Reduction
Learn how to operationalize CTEM as a continuous cycle that validates exploitable risk, prioritizes what matters, verifies remediation, and drives measurable risk reduction.
CVE-2026-72898 | Metabase Pre-Authentication SQL Injection Vulnerability
CVE-2026-72898 is a critical pre-authentication SQL injection vulnerability affecting Metabase. NodeZero® Rapid Response safely validates whether the actively exploited vulnerability is exploitable in your environment.
Why Validation Changes Everything. But Isn’t Enough.
Security teams don't need more findings. They need evidence of what matters. Learn how validation turns assumptions into evidence, improves prioritization, and strengthens CTEM programs.
From Patch Tuesday to Pentest Wednesday®: How a Major Transportation Company Turned AWS Attack Paths Into Action
See how a major transportation company used repeated NodeZero® AWS pentests to uncover exploitable IAM attack paths, prioritize meaningful risk, and verify that remediation actually closed the exposure.
From Scanner Findings to Verifiable Web Application Risk
See how a cloud-native merchandise returns technology provider used NodeZero WebApp to continuously validate exploitable risk and give developers evidence they could act on.
Meeting Canada’s Bill C-8 Cybersecurity Requirements with NodeZero®
Canada's Bill C-8 introduces new cybersecurity expectations for critical infrastructure. Learn how NodeZero® helps organizations validate security continuously, prove remediation, and build evidence-based cyber resilience.
CVE-2026-18556 and CVE-2026-18577 | N-able N-central Authentication Bypass Vulnerabilities
CVE-2026-18556 and CVE-2026-18577 are authentication bypass vulnerabilities affecting N-able N-central. NodeZero® Rapid Response safely validates exposure and verifies remediation.
Horizon3 Accelerates Partner-Led Growth with $20 Million Investment
Horizon3 is investing $20 million to accelerate partner-led growth through expanded channel leadership, enablement, strategic alliances, and go-to-market programs that help partners deliver proactive security at scale.