CVE-2026-85706

Vendor

GitLab

Product

Community Edition and Enterprise Edition

CVSS v3.1

10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

EPSS

1.00 (p100)

CISA KEV

listed

Exposure class

Developer platform, Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 56
   KEV CISA KEV 11 Sep 2026

   GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

   GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the…

   KEV Fix available CVE-2026-85706 GitLab
2. 79
   GitLab release GitLab 23 Sep 2026

   GitLab Critical Patch Release: 19.0.9, 18.11.12

   On September 23, 2026, we released versions 19.0.9 and 18.11.12 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions backport the fixes for two critical vulnerabilities, CVE-2026-85706 and CVE-2026-87719…

   Exploited CVSS 10.0 Fix available CVE-2026-85706CVE-2026-87719 GitLab
3. 68
   Outbreak alert FortiGuard 23 Sep 2026

   GitLab Path Traversal Vulnerability

   FortiGuard Labs has observed attack activity targeting CVE-2026-85706, a critical path traversal vulnerability in GitLab Community Edition and Enterprise Edition. The vulnerability affects the repository commits API and can allow…

   Exploited CVSS 10.0 No fix yet CVE-2026-85706 Fortinet GitLab
4. 52
   CISA alert CISA 11 Sep 2026

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-85706 GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability…

   Exploited CVE-2026-85706 GitLab
5. 39
   Threat signal FortiGuard 25 Sep 2026

   GitLab Path Traversal vulnerability

   What is the Vulnerability? FortiGuard Labs has observed attack activity targeting CVE-2026-85706, a critical path traversal vulnerability in GitLab Community Edition and Enterprise Edition. The vulnerability affects the…

   CVSS 10.0 CVE-2026-85706 Fortinet GitLab
6. 36
   GitLab release GitLab 10 Sep 2026

   GitLab Critical Patch Release: 19.3.2, 19.2.6, 19.1.8

   Update : On September 23, 2026, we backported fixes for CVE-2026-85706 and CVE-2026-87719 to versions 19.0.9 and 18.11.12 of GitLab Community Edition (CE) and Enterprise Edition (EE). Self-managed GitLab administrators running…

   Fix available CVE-2026-85706CVE-2026-87719CVE-2026-88765+15 more GitLab
7. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
8. 19
   Research Censys 24 Sep 2026

   Introducing Censys CLI Skills: AI-Assisted Investigations at Scale

   At 2 a.m., a workstation makes an outbound TLS connection to a VPS on port 7443. The EDR flags it. A Tier 1 analyst on her third night shift (and her third cup of coffee) pulls up the IP: DigitalOcean, Linux, a self-signed…

   CVE-2026-85706
9. 16
   Research Check Point Research 14 Sep 2026

   14th September – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification provider, has disclosed a data breach…

   CVE-2026-72898CVE-2026-85880CVE-2026-81963+4 more