security Source: The Hacker News
📅 13 September 2026 at 04:12 PM UTC

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

Verified Primary Feed Ingestion
🏷️ Identified Common Vulnerabilities & Exposures (CVE)
⚡ Executive Takeaways & Intelligence Summary
GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under

📰 Related Surveillance Disclosures