{"uuid": "cf9b47ec-c60b-4423-871a-7d6279280d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvj3pofyzr2q", "content": "\ud83e\udd16 CVE-2026-85706 (CVSS 10.0): unauthenticated arbitrary file read in GitLab CE/EE via the repository commits API. Affects 18.7\u201319.3; fixed in 19.1.8, 19.2.6, 19.3.2. Actively exploited, in CISA KEV. Patch now.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-85706", "creation_timestamp": "2026-09-14T21:50:14.878336Z"}