{"vulnerability": "cve-2026-10053", "sightings": [{"uuid": "03c94015-a29f-4ff2-9172-1a32f6c3b0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-24T21:00:04.448910Z"}, {"uuid": "468b4aaf-6dab-438b-9268-c49c9c55b6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-24T21:00:05.894614Z"}, {"uuid": "19bb50ca-ba5a-4f10-9bd8-a9a5376ee442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/WmTYVBgmVan3mzvjl6-Xk0siaOAEpVUjrVkE0CKXWUqRTfo", "content": "", "creation_timestamp": "2026-08-25T00:00:07.985341Z"}, {"uuid": "019c5dfe-4dee-4aec-b047-b89f770eb8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "published-proof-of-concept", "source": "Telegram/SUyvNys0dzEwjXv_rLl9vzt4eS_nd4PMMSmFi1zAltVWOpQ", "content": "", "creation_timestamp": "2026-08-25T00:00:09.647784Z"}, {"uuid": "6e2d9789-1045-4ad4-8cb2-0d252a414d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7jtrbmgtky4zp", "content": "CVE-2026-10053 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab\nCVE ID : CVE-2026-10053\n \n Published : Aug. 23, 2026, 10:16 a.m. | 18\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions fr...", "creation_timestamp": "2026-08-23T10:41:32.024958Z"}, {"uuid": "948e7382-f1e5-487b-805e-613d48a11f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtqnaqn2nc22", "content": "\ud83d\udfe0 CVE-2026-10053 - High (8.5)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-10053/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T11:02:17.481126Z"}, {"uuid": "8d164673-b7aa-4c7d-9ab0-c6c5f0799e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mtqtjmvt5u2h", "content": "GitLab CE/EE\uff08\u5168\u30d0\u30fc\u30b8\u30e7\u30f3\uff09\u3067\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u30ec\u30b8\u30b9\u30c8\u30ea\u306e\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10053 CVSS 8.5 | HIGH", "creation_timestamp": "2026-08-23T12:54:37.202707Z"}, {"uuid": "057906ca-f99d-4503-b54a-2e8383412b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10053", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mtr5r2fkma23", "content": "A logged-in GitLab user can abuse the package registry to write files across a self-managed server (CVE-2026-10053, CVSS 8.5).\n\nA public test lab just proved the flaw is real.\n\nFix: update self-managed GitLab to 19.2.2, 19.1.4, or 19.0.6.", "creation_timestamp": "2026-08-23T15:57:44.411268Z"}, {"uuid": "69e3efe9-d1ee-40d1-a443-d14cefcf6635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-10053", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mtvmnkb6vh2b", "content": "569,000 emails. One Telegram channel. Zero hype.\n\nGolf Canada breach.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-10053-gitlab-rce-via-package-registry-path-traversal-poc/\n\nby Yazoul AI #InfoSec #DataBreach", "creation_timestamp": "2026-08-25T10:34:51.092807Z"}]}