CERT24GitLab CVE-2026-85706: Full File Read with One Unauthenticated HTTP Request – Exploited Within 24 HoursLoading data…
CERT24Threat Observatory
Period

GitLab CVE-2026-85706: Full File Read with One Unauthenticated HTTP Request – Exploited Within 24 Hours

CVE-2026-85706 is a path traversal vulnerability in GitLab’s repository commits API with a CVSS score of 10.0. According to the source, active probing and exploitation attempts began within 24 hours of disclosure, and CISA added the vulnerability to its Known Exploited Vulnerabilities catalog.

← Back to intelligence

GitLab CVE-2026-85706: Full File Read with One Unauthenticated HTTP Request – Exploited Within 24 Hours

CVE-2026-85706 is a path traversal vulnerability in GitLab’s repository commits API with a CVSS score of 10.0. According to the source, active probing and exploitation attempts began within 24 hours of disclosure, and CISA added the vulnerability to its Known Exploited Vulnerabilities catalog.