https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 11 Sep 2026 21:38:23 +0000 https://vulnerability.circl.lu/sighting/36d237d5-ea86-4f89-a70a-bc1e3ca73fc0/export {"uuid": "36d237d5-ea86-4f89-a70a-bc1e3ca73fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvbim3efjw27", "content": "\ud83e\udd16 CVE-2026-85706 (CVSS 10.0): path traversal in GitLab's repository commits API lets unauthenticated users read arbitrary files. Patches released; in-the-wild probes seen within hours of disclosure.\n\nhttps://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html", "creation_timestamp": "2026-09-11T21:19:39.043475Z"} {"uuid": "36d237d5-ea86-4f89-a70a-bc1e3ca73fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvbim3efjw27", "content": "\ud83e\udd16 CVE-2026-85706 (CVSS 10.0): path traversal in GitLab's repository commits API lets unauthenticated users read arbitrary files. Patches released; in-the-wild probes seen within hours of disclosure.\n\nhttps://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html", "creation_timestamp": "2026-09-11T21:19:39.043475Z"} https://vulnerability.circl.lu/sighting/36d237d5-ea86-4f89-a70a-bc1e3ca73fc0/export Fri, 11 Sep 2026 21:19:39 +0000 https://vulnerability.circl.lu/sighting/fa779750-5e14-4190-a79d-a3c837b518e4/export {"uuid": "fa779750-5e14-4190-a79d-a3c837b518e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mvbfklda3k2q", "content": "\ud83d\udea8 Critical GitLab flaw: CVE-2026-85706 carries a CVSS 10.0 score.\n\nUnder vulnerable conditions, an unauthenticated attacker could read arbitrary files from a self-managed GitLab server.\n\ntechupdate24.com/gitlab-cve-2...\n\n#GitLab #InfoSec #git #news", "creation_timestamp": "2026-09-11T20:25:07.875599Z"} {"uuid": "fa779750-5e14-4190-a79d-a3c837b518e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mvbfklda3k2q", "content": "\ud83d\udea8 Critical GitLab flaw: CVE-2026-85706 carries a CVSS 10.0 score.\n\nUnder vulnerable conditions, an unauthenticated attacker could read arbitrary files from a self-managed GitLab server.\n\ntechupdate24.com/gitlab-cve-2...\n\n#GitLab #InfoSec #git #news", "creation_timestamp": "2026-09-11T20:25:07.875599Z"} https://vulnerability.circl.lu/sighting/fa779750-5e14-4190-a79d-a3c837b518e4/export Fri, 11 Sep 2026 20:25:07 +0000 https://vulnerability.circl.lu/sighting/3585a431-e3e9-403e-a8f4-aeef584ffba0/export {"uuid": "3585a431-e3e9-403e-a8f4-aeef584ffba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbezdpt7s2l", "content": "GitLab CVE-2026-85706 was exploited within a day of disclosure. The critical path traversal flaw (CVSS 10.0) can let unauthenticated attackers read arbitrary files. #GitLab #CVE202685706 #PathTraversal", "creation_timestamp": "2026-09-11T20:15:25.972265Z"} {"uuid": "3585a431-e3e9-403e-a8f4-aeef584ffba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbezdpt7s2l", "content": "GitLab CVE-2026-85706 was exploited within a day of disclosure. The critical path traversal flaw (CVSS 10.0) can let unauthenticated attackers read arbitrary files. #GitLab #CVE202685706 #PathTraversal", "creation_timestamp": "2026-09-11T20:15:25.972265Z"} https://vulnerability.circl.lu/sighting/3585a431-e3e9-403e-a8f4-aeef584ffba0/export Fri, 11 Sep 2026 20:15:25 +0000 https://vulnerability.circl.lu/sighting/3fddfab9-f48a-4e97-a474-6da795ed4484/export {"uuid": "3fddfab9-f48a-4e97-a474-6da795ed4484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvbeyo43zi2y", "content": "\ud83d\uded1 CVE-2026-85706\nGitLab Community Edition and Enterprise Edition\nKEV \u2705\nTL;DR: GitLab Community Edition and Enterprise Edition contains a path traversal vulnerab\u2026\nhttps://cvesentinel.com/report/CVE-2026-85706?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T20:15:03.016747Z"} {"uuid": "3fddfab9-f48a-4e97-a474-6da795ed4484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvbeyo43zi2y", "content": "\ud83d\uded1 CVE-2026-85706\nGitLab Community Edition and Enterprise Edition\nKEV \u2705\nTL;DR: GitLab Community Edition and Enterprise Edition contains a path traversal vulnerab\u2026\nhttps://cvesentinel.com/report/CVE-2026-85706?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T20:15:03.016747Z"} https://vulnerability.circl.lu/sighting/3fddfab9-f48a-4e97-a474-6da795ed4484/export Fri, 11 Sep 2026 20:15:03 +0000 https://vulnerability.circl.lu/sighting/a3242d2f-19c7-470c-97ad-10bde0ff8ded/export {"uuid": "a3242d2f-19c7-470c-97ad-10bde0ff8ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbe6oqqun2n", "content": "GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw in the commits API that is already seeing probes and could expose arbitrary files. CVE-2026-87719 also fixed in GitLab EE. #GitLab #CVE202685706 #CVE202687719", "creation_timestamp": "2026-09-11T20:00:31.398618Z"} {"uuid": "a3242d2f-19c7-470c-97ad-10bde0ff8ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvbe6oqqun2n", "content": "GitLab patched CVE-2026-85706, a CVSS 10 path traversal flaw in the commits API that is already seeing probes and could expose arbitrary files. CVE-2026-87719 also fixed in GitLab EE. #GitLab #CVE202685706 #CVE202687719", "creation_timestamp": "2026-09-11T20:00:31.398618Z"} https://vulnerability.circl.lu/sighting/a3242d2f-19c7-470c-97ad-10bde0ff8ded/export Fri, 11 Sep 2026 20:00:31 +0000 https://vulnerability.circl.lu/sighting/e743cbf4-8fe2-45e7-be45-2be6056e6c8c/export {"uuid": "e743cbf4-8fe2-45e7-be45-2be6056e6c8c", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b07d40c1-522c-40bb-8f2b-55076a002453", "content": "", "creation_timestamp": "2026-09-11T20:00:02.742474Z"} {"uuid": "e743cbf4-8fe2-45e7-be45-2be6056e6c8c", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b07d40c1-522c-40bb-8f2b-55076a002453", "content": "", "creation_timestamp": "2026-09-11T20:00:02.742474Z"} https://vulnerability.circl.lu/sighting/e743cbf4-8fe2-45e7-be45-2be6056e6c8c/export Fri, 11 Sep 2026 20:00:02 +0000 https://vulnerability.circl.lu/sighting/4abf36b8-1f71-4680-9963-ea3d1c7f3400/export {"uuid": "4abf36b8-1f71-4680-9963-ea3d1c7f3400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117254163583104386", "content": "CVE-2026-85706 is now in the KEV but the CVE still isn't published. LMAO. Go hack and patch more GitLab shit.", "creation_timestamp": "2026-09-11T19:55:49.617034Z"} {"uuid": "4abf36b8-1f71-4680-9963-ea3d1c7f3400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117254163583104386", "content": "CVE-2026-85706 is now in the KEV but the CVE still isn't published. LMAO. Go hack and patch more GitLab shit.", "creation_timestamp": "2026-09-11T19:55:49.617034Z"} https://vulnerability.circl.lu/sighting/4abf36b8-1f71-4680-9963-ea3d1c7f3400/export Fri, 11 Sep 2026 19:55:49 +0000 https://vulnerability.circl.lu/sighting/1b97ec29-a875-4cbc-9d68-aa716a39ce43/export {"uuid": "1b97ec29-a875-4cbc-9d68-aa716a39ce43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvbco7clr42x", "content": "GitLab put out a critical patch on 10 September for CVE-2026-85706, CVSS 10.0, an unauthenticated path traversal in the commits API that reads config files and secrets off self-managed servers. watchTowr saw probing begin at 06:00 UTC today. docs.gitlab.com/releases...", "creation_timestamp": "2026-09-11T19:33:24.050051Z"} {"uuid": "1b97ec29-a875-4cbc-9d68-aa716a39ce43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mvbco7clr42x", "content": "GitLab put out a critical patch on 10 September for CVE-2026-85706, CVSS 10.0, an unauthenticated path traversal in the commits API that reads config files and secrets off self-managed servers. watchTowr saw probing begin at 06:00 UTC today. docs.gitlab.com/releases...", "creation_timestamp": "2026-09-11T19:33:24.050051Z"} https://vulnerability.circl.lu/sighting/1b97ec29-a875-4cbc-9d68-aa716a39ce43/export Fri, 11 Sep 2026 19:33:24 +0000 https://vulnerability.circl.lu/sighting/5417ba67-f99d-4e28-8f08-a2331f0c3d4b/export {"uuid": "5417ba67-f99d-4e28-8f08-a2331f0c3d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvbcicyf6h2m", "content": "\ud83d\udce2 GitLab corrige une faille critique de path traversal (CVE-2026-85706) dans l'API commits\n\nL'article couvre la divulgation et le correctif de deux vuln\u00e9rabilit\u00e9s critiques affectant la plateforme GitLab. \ud83d\udd34 Vuln\u00e9rabilit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#GitLab #PathTraversal #Cyberveille", "creation_timestamp": "2026-09-11T19:30:06.466342Z"} {"uuid": "5417ba67-f99d-4e28-8f08-a2331f0c3d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mvbcicyf6h2m", "content": "\ud83d\udce2 GitLab corrige une faille critique de path traversal (CVE-2026-85706) dans l'API commits\n\nL'article couvre la divulgation et le correctif de deux vuln\u00e9rabilit\u00e9s critiques affectant la plateforme GitLab. \ud83d\udd34 Vuln\u00e9rabilit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#GitLab #PathTraversal #Cyberveille", "creation_timestamp": "2026-09-11T19:30:06.466342Z"} https://vulnerability.circl.lu/sighting/5417ba67-f99d-4e28-8f08-a2331f0c3d4b/export Fri, 11 Sep 2026 19:30:06 +0000 https://vulnerability.circl.lu/sighting/f87eba42-ebb5-494f-9656-8b95c474cc56/export {"uuid": "f87eba42-ebb5-494f-9656-8b95c474cc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvbb7iiclr2j", "content": "Patch GitLab now \u2014 CVE-2026-85706 (CVSS 10.0) unauthenticated path traversal under active in-the-wild probing. Fix: 19.1.8/19.2.6/19.3.2. https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html", "creation_timestamp": "2026-09-11T19:07:16.360028Z"} {"uuid": "f87eba42-ebb5-494f-9656-8b95c474cc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvbb7iiclr2j", "content": "Patch GitLab now \u2014 CVE-2026-85706 (CVSS 10.0) unauthenticated path traversal under active in-the-wild probing. Fix: 19.1.8/19.2.6/19.3.2. https://thehackernews.com/2026/09/gitlab-cvss-10-file-read-flaw-draws-in.html", "creation_timestamp": "2026-09-11T19:07:16.360028Z"} https://vulnerability.circl.lu/sighting/f87eba42-ebb5-494f-9656-8b95c474cc56/export Fri, 11 Sep 2026 19:07:16 +0000