{"uuid": "6cc587ba-578e-40e2-9ac0-617875a93e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mwkrzqx2hk2c", "content": "CVE-2026-85706: GitLab shipped fixes Sept 10 for a CVSS 10.0 path traversal in the repo commits API. In-the-wild probes same day. CISA added it to KEV \u2014 3 day deadline.\n\nhttps://trinity.sh/posts/2026-09-28-gitlab-cve-2026-85706-patch-to-kev/", "creation_timestamp": "2026-09-28T07:27:27.189685Z"}