Back to today’s briefing

Story perspectives

CISA Adds CVE-2026-85706 to Exploited List

By Drooid · Sep 14, 2026, 10:47 PM UTC · How we work

2 1 Full Breakdown

Summary

Story summary

CISA added CVE-2026-85706 to its Known Exploited Vulnerabilities catalog.
GitLab disclosed a maximum-severity path-traversal bug in its repository commits API.
GitLab assigned the vulnerability a perfect 10.0 CVSS v3.1 score.
GitLab issued patches for versions 19.3.2, 19.2.6 and 19.1.8 on September 10.
watchTowr observed probes for CVE-2026-85706 and urged operators to patch or restrict public access.

1 of 1

Story summary

CISA added CVE-2026-85706 to its Known Exploited Vulnerabilities catalog.
GitLab disclosed a maximum-severity path-traversal bug in its repository commits API.
GitLab assigned the vulnerability a perfect 10.0 CVSS v3.1 score.
GitLab issued patches for versions 19.3.2, 19.2.6 and 19.1.8 on September 10.
watchTowr observed probes for CVE-2026-85706 and urged operators to patch or restrict public access.