{"uuid": "c14727ac-7854-42f8-80f8-c50b1ec85379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvc4htwcxn2t", "content": "\u26a0\ufe0f PATCH NOW\n\nGitLab shipped a critical patch: CVE-2026-85706 lets an unauthenticated attacker read files, including secrets, off a self-managed GitLab server (CVSS 10). Scanning for exposed servers has already begun.\n\nSelf-managed GitLab is exposed.\n\nPatch to 19.3.2, 19.2.6, or 19.1.8 now.", "creation_timestamp": "2026-09-12T03:15:08.597861Z"}