src_2dcfd086714def6364
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Sep 14, 2026 10:02 UTC
- Retrieved
- Oct 08, 2026 03:49 UTC
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
OverviewOn September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE). The release addresses CVE-2026-85706, a critical path traversal vulnerability (CWE-22) in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLab, improper path confinement and missing authentication enforcement could allow an unauthenticated
Reference details
- Source category
- Research & news
- Report title
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild- First reported
- Sep 14, 2026 10:02 UTC
- Last reported
- Sep 14, 2026 10:02 UTC
- Catalog updated
- Oct 08, 2026 03:49 UTC
- Record ID
3b7de364dd5672060ab69c340f1576686a4a9d7cf2cd486d2af535fd8788d70f
CVEs mentioned by sources
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Review source update dates and status
- src_2dcfd086714def6364Collection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.