ctrlINT What the industry said about every indicator, with the quote

CVE-2026-85706Vulnerability

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 8 independent sources · first reported by Infosecurity Magazine · last reported

Last reported 11 days ago

CISA KEVAdded 11 Sep 2026
Fix due 14 Sep 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS92.0%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026

What the reports say

9 reports, newest first · the exact sentence from each

  1. “Last month, another maximum-severity security flaw in GitLab CE and EE (CVE-2026-85706, CVSS score: 10.0) witnessed in-the-wild probes within hours of public disclosure.”

    The Hacker NewsNews
    GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

  2. “CVE-2026-85706”

    Recorded FutureVendor
    September 2026 CVE Landscape

  3. “CVE-2026-85706 A path traversal vulnerability in GitLab CE/EE allowed access to local files on the server, posing a risk of source code, database account, and CI/CD secret leaks.”

    AhnLab ASECVendor
    Q3 2026 Vulnerability Trend Report

  4. “Gitlab indique que la vulnérabilité CVE-2026-85706 est activement exploitée.”

    CERT-FRGovernment
    Multiples vulnérabilités dans GitLab (30 septembre 2026)

  5. “CVE reference: CVE-2026-85706”

    Rapid7Vendor
    Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

  6. “CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.”

    Dark ReadingNews
    Maximum Severity GitLab Flaw Puts Supply Chains at Risk

  7. “GitLab has addressed CVE-2026-85706, a critical path traversal vulnerability affecting Community and Enterprise Editions, with a CVSS score of 10.0.”

    Check Point ResearchVendor
    14th September – Threat Intelligence Report

  8. “CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild”

    Rapid7Vendor
    CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

  9. “CVE-2026-85706 is described as an “improper limitation of a pathname to a restricted directory,” or “path traversal” flaw.”

    Infosecurity MagazineNews
    Hackers Exploit Maximum Severity Flaw in GitLab

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-85046, CVE-2026-85880, CVE-2026-81963, CVE-2026-76460, CVE-2026-86060, CVE-2026-5430, CVE-2026-67276, CVE-2026-85102, CVE-2026-84869, CVE-2026-88771, CVE-2026-87719, CVE-2026-60004, CVE-2022-0847, CVE-2026-35273, CVE-2026-87491, CVE-2026-50522, CVE-2026-48710, CVE-2025-39964, CVE-2026-16812

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-85706 here?
No account needed. We do not store your IP address.