GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-11 16:30 UTC
  • Importiert: 2026-09-18 13:23 UTC
  • CVSS: 10.0
  • Quelle-ID: thn_global
  • uid_hash: 8c2df3cff294317d6f13fd0e7558c7d5d41992bb01bc45cf3f008c7cd914a7c3

Inhalt

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure.

The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-85706

CRITICAL

10

CRITICAL

10

2026-09-12

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews