GitLab enfrenta exploração ativa de falha crítica e a CISA exige correção urgente. 🚨

#falha #gitlab #urgente

CISA says attackers are exploiting a max-severity GitLab flaw, CVE-2026-85706, that can expose credentials and secrets. GitLab has released fixes in CE and EE. #GitLab #CISA #watchTowr

CISA reports active exploitation of a CRITICAL GitLab vulnerability. No details on affected versions — monitor vendor advisories for updates and be ready to patch. https://radar.offseq.com/threat/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks-fbc70b60d8092d92 #OffSeq #GitLab #CyberT...

🔴 GitLab CVE-2026-85706 — CVSS 10.0

Critical unauthenticated path traversal can expose arbitrary files and sensitive secrets on vulnerable GitLab servers. Internet scanning started almost immediately after disclosure.

stemshop.top/blog/gitlab-...

#CVE #CVE202685706 #GitLab #CyberSecurity #InfoSec

GitLab CVE-2026-85706 (CVSS 10.0), actively exploited. Unauthenticated path traversal in commits API — one request reads arbitrary files, no creds needed. Affected: 18.7-19.1.7, 19.2-19.2.5, 19.3-19.3.1. Fix: 19.1.8/19.2.6/19.3.2. CISA KEV deadline today — patch & rotate tokens. #InfoSec #GitLab

Our weekly CVE report tracked 3,856 new CVEs and 19 exploited vulnerabilities. See which reached CISA KEV and which stayed exclusive to DC.

#CVE #WeeklyCVEReport #CISAKEV #ExploitedVulnerabilities #InfoSec #MikroTik #GitLab #PatchNow #ThreatIntel #Cybersecurity

GitLab Critical Path Traversal Vulnerability CVE-2025-13761 Enables RCE

https://potatosecuritynews.com/gitlab-patches-critical-flaws
https://flagthis.com/tldr/7270

##ZeroDay ##PathTraversal ##RCE ##GitLab ##Vulnerability

GitLab Critical Path Traversal Vulnerability CVE-2025-13761 Enables RCE

https://cybersecuritynews.com/gitlab-patches-critical-flaws
https://flagthis.com/tldr/7270

##ZeroDay ##PathTraversal ##RCE ##GitLab ##Vulnerability

SUN | 13 SEPT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #CyberWarfare #DataBreach #ZeroDay #PasskeyPhishing #GitLab #ConnectWise #MikroTik #InfoSec #RSSHDelivery #NewYorkTech #TechTok #CyberTok

AI abuse escalates as attackers use Claude for large-scale automation, OpenAI agents push 2,000+ malicious RubyGem packages, and GitLab file-read exploitation is probed within a day. #China #Claude #GitLab

GitLab releases emergency patches for a critical CVSS 10.0 path traversal flaw (CVE-2026-85706). Unauthenticated attackers can read arbitrary files. Active scanning detected. Upgrade self-managed instances NOW. #GitLab #CVE #CyberSecurity #PatchNow

🌐 cyber[.]netsecops[.]io

#GitLab urges users to patch max severity path traversal flaw

https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/

#cybersecurity #FOSS

GitLab releases emergency patches for a critical CVSS 10.0 path traversal flaw (CVE-2026-85706). Unauthenticated attackers can read arbitrary files. Active scanning detected. Upgrade self-managed instances NOW. #GitLab #CVE #CyberSecurity #PatchNow

🌐 cyber[.]netsecops[.]io

GitLab Critical Path Traversal: Analyzing the Impact of CVE-2026-85706

A deep dive into the critical CVE-2026-85706 GitLab vulnerability, its active exploitation by attackers, and essential remediation steps for self-managed instan

#CISA #GitLab

Read more →

GitLab fixed two serious flaws; one was targeted within hours of disclosure.

A self-hosted instance with a public project could expose files to unauthenticated…

https://en.hacks.gr/gitlab-provlima-asfaleias-epetrepe-tin-anagnosi-archeion-choris-logariasmo/

#GitLab #GitLabSecurity #DataProtection

A CVSS 10 flaw lets attackers read files, yet probes arrived within hours of disclosure. #GitLab sugataai.com/blog/gitlab-...

#GitLab rättar kritiska sårbarheter - CERT-SE
https://www.cert.se/2026/09/gitlab-rattar-kritiska-sarbarheter.html