{"uuid": "522fbd16-66ce-46e2-9b9d-ab92afae5cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/whisperprotocol.bsky.social/post/3mvh6nhvmjs2r", "content": "GitLab CVE-2026-85706 (CVSS 10.0), actively exploited. Unauthenticated path traversal in commits API \u2014 one request reads arbitrary files, no creds needed. Affected: 18.7-19.1.7, 19.2-19.2.5, 19.3-19.3.1. Fix: 19.1.8/19.2.6/19.3.2. CISA KEV deadline today \u2014 patch & rotate tokens. #InfoSec #GitLab", "creation_timestamp": "2026-09-14T03:37:31.663765Z"}