~Cisa~
CISA added actively exploited GitLab CE/EE path traversal CVE-2026-85706 to its KEV Catalog.
-
IOCs: CVE-2026-85706
-
#CVE-2026-85706 #GitLab #ThreatIntel

CVE-2026-85706 - community edition and enterprise edition
A flaw in GitLab’s repository commits API could let someone without an account view files stored on the server. The issue affected all GitLab Community and…

Too many irrelevant or confusing CVEs? Use stackflag.com

#gitlab #CVE #infosec

CVE-2026-87719 - gitlab
GitLab versions up to 19.3.1 let a logged‑in user with Duo Chat rights see advanced search configurations and hidden passwords by sending a specially crafted request. This could expose internal…

Too many irrelevant or confusing CVEs? Use stackflag.com

#gitlab #CVE #infosec

GitLab rushed emergency patches for 2 critical flaws. CVE-2026-85706 can let unauthenticated attackers read files, while CVE-2026-87719 may expose settings and passwords. #GitLab #CVE202685706 #CISA

🚨 Critical GitLab flaw: CVE-2026-85706 carries a CVSS 10.0 score.

Under vulnerable conditions, an unauthenticated attacker could read arbitrary files from a self-managed GitLab server.

techupdate24.com/gitlab-cve-2...

#GitLab #InfoSec #git #news

GitLab CVE-2026-85706 was exploited within a day of disclosure. The critical path traversal flaw (CVSS 10.0) can let unauthenticated attackers read arbitrary files. #GitLab #CVE202685706 #PathTraversal

GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw in the commits API that is already seeing probes and could expose arbitrary files. CVE-2026-87719 also fixed in GitLab EE. #GitLab #CVE202685706 #CVE202687719

📢 GitLab corrige une faille critique de path traversal (CVE-2026-85706) dans l'API commits

L'article couvre la divulgation et le correctif de deux vulnérabilités critiques affectant la plateforme GitLab. 🔴 Vulnérabilité…

🟢 vérification factuelle haute
#GitLab #PathTraversal #Cyberveille

GitLab releases emergency patches for a critical CVSS 10.0 path traversal flaw (CVE-2026-85706). Unauthenticated attackers can read arbitrary files. Active scanning detected. Upgrade self-managed instances NOW. #GitLab #CVE #CyberSecurity #PatchNow

🌐 cyber[.]netsecops[.]io

GitLab patched CVE-2026-85706, a max-severity path traversal flaw that could expose credentials and sensitive data. watchTowr also reported early probing against exposed GitLab systems. #GitLab #CVE-2026-85706 #watchTowr

Critical CVSS 10 GitLab file-read flaw (CVE-2026-85706) under active exploit — upgrade now. #GitLab #Security #Vulnerability #CVSS10 #Cybersecurity #DevSecOps thedailytechfeed.com/gitlab-patch...

📰 GitLab Desak Pengguna Segera Menambal Celah Path Traversal Kritikal CVE-2026-85706

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/11/gitlab-cve-2026-85706-path-traversal/

#potatosecurity #dataBreach #gitlab #keamanan #keamananSiber #kebocoranData #vulnerability

📰 GitLab Desak Pengguna Segera Menambal Celah Path Traversal Kritikal CVE-2026-85706

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/11/gitlab-cve-2026-85706-path-traversal/

#cybersecurity #dataBreach #gitlab #keamanan #keamananSiber #kebocoranData #vulnerability

Governing the Machine: Scaling Agentic Software Development in GitLab 19.3

Explore how GitLab 19.3 scales agentic software development for the enterprise, balancing AI-driven velocity with strict security boundaries and governance.

#GitLab #AICoding

Read more →

GitLab alerta para uma vulnerabilidade de gravidade máxima e pede atualização imediata dos servidores. 🚨

#alerta #gitlab #vulnerabilidade

GitLab's commits API let anyone on the internet read your SSH keys and secrets - no login needed. https://intel.threadlinqs.com/threat/TL-2026-2442 #ThreatIntel #CVE_2026_85706 #CVE_2026_87719 #GitLab

Critical GitLab flaws fixed—file read, credential theft, RCE risks patched. Self-managed users must update. #GitLab #Vulnerability #Security #CVE #DevOps #RCE https://thedailytechfeed.com/gitlab-urges-patch-after-critical-vulnerabilities-exposed-in-self-managed-deployments/

⚠️ GitLab is reporting a Incident since 05:50 UTC

"Artifact upload failures and timeouts"

Affects: CI/CD, Google Compute Engine

Live timeline → https://pingoru.io/providers/gitlab/incidents/10687750

#GitLab #GitLabDown