{"uuid": "b39d0ad8-ce30-4b60-bc60-4627024237c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvjqicbqfj24", "content": "1/ GITLAB: CVE-2026-85706 \u2014 missing auth enforcement in repo commits API; unauth attackers read secrets/files in one HTTP POST. WatchTowr sees in-the-wild probes; CISA BOD 26-04 requires federal fix by Sept 14. Patch to 19.3.2/19.2.6/19.1. Src: BleepingComputer, DarkReading", "creation_timestamp": "2026-09-15T04:01:56.058220Z"}