{"uuid": "1b97ec29-a875-4cbc-9d68-aa716a39ce43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvbco7clr42x", "content": "GitLab put out a critical patch on 10 September for CVE-2026-85706, CVSS 10.0, an unauthenticated path traversal in the commits API that reads config files and secrets off self-managed servers. watchTowr saw probing begin at 06:00 UTC today. docs.gitlab.com/releases...", "creation_timestamp": "2026-09-11T19:33:24.050051Z"}