<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Actioncable — PoC Archive</title><link>https://poc.intelseclab.com/tags/actioncable/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 05 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/actioncable/index.xml" rel="self" type="application/rss+xml"/><item><title>GitLab WebSocket GraphqlChannel Unauthorized Method Enumeration — CVE-2026-5173</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5173-gitlab-websocket-graphql-bypass/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-5173-gitlab-websocket-graphql-bypass/</guid><description>High severity — web · CVE-2026-5173. Status: PoC. Affects: GitLab CE/EE, ActionCable WebSocket endpoint (/-/cable), GraphqlChannel. Tags: gitlab, websocket, graphql, actioncable, graphqlchannel, information-disclosure, broken-access-control.</description><category>web</category><category>High</category><category>gitlab</category><category>websocket</category><category>graphql</category><category>actioncable</category><category>graphqlchannel</category><category>information-disclosure</category><category>broken-access-control</category></item></channel></rss>