{"uuid": "adf1a872-0c0f-4104-951a-cbc62270a320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvhkybmbq62q", "content": "\ud83e\udd16 CISA: CVE-2026-85706 (max severity) GitLab flaw exploited in the wild \u2014 unauthenticated leak of credentials/secrets via commits API, 1 HTTP request. Fixed in 19.3.2/19.2.6/19.1.\nhttps://www.bleepingcomputer.com/news/security/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks/", "creation_timestamp": "2026-09-14T07:18:10.306988Z"}