{"vulnerability": "cve-2026-8570", "sightings": [{"uuid": "392a7d26-1ed8-4175-840c-4ee89296ccc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8570", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260515", "content": "", "creation_timestamp": "2026-05-14T18:00:00.000000Z"}, {"uuid": "a6c759bb-b6af-4391-a92d-48996260fefd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-8570", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260518", "content": "", "creation_timestamp": "2026-05-17T18:00:00.000000Z"}, {"uuid": "65ab8839-45c9-4e73-8269-d168b0f64610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/j74zbtuplef5k", "content": "CVE-2026-85702 - ramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication\nCVE ID : CVE-2026-85702\n \n Published : Sept. 4, 2026, 8:30 p.m. | 52\u00a0minutes ago\n \n Description : A security vulnerability has been detected in ramon-victor fre...", "creation_timestamp": "2026-09-04T21:24:55.150992Z"}, {"uuid": "18dac316-c2c7-4918-b3aa-101e349564e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bryy3ucpykyh7", "content": "CVE-2026-85703 - ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources\nCVE ID : CVE-2026-85703\n \n Published : Sept. 4, 2026, 8:45 p.m. | 37\u00a0minutes ago\n \n Description : A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb4155...", "creation_timestamp": "2026-09-04T21:30:55.062280Z"}, {"uuid": "a18774fd-f9bd-402d-ba3e-52d0a5bb254a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/53acyindn352t", "content": "CVE-2026-85704 - ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition\nCVE ID : CVE-2026-85704\n \n Published : Sept. 4, 2026, 9 p.m. | 22\u00a0minutes ago\n \n Description : A security flaw has been discovered in ramon-victor freegpt-webui up to 098db3dfeb415...", "creation_timestamp": "2026-09-04T21:44:54.762316Z"}, {"uuid": "2bc2cdcb-ad0a-4924-8cde-0b4c1d14490d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv35a2rqrj2g", "content": "CVE-2026-85702: Missing auth flaw in Freegpt Webui backend (\u2264098db3d) lets remote attackers abuse the Conversation API. CVSS 7.3. Exploit is public and unpatched. If you run this, disable remote access or roll back now. https://www.valtersit.com/cve/CVE-2026-85702/ #CVE #infosec ", "creation_timestamp": "2026-09-09T08:40:02.933141Z"}, {"uuid": "ce482070-4ab0-414b-998a-6625e0c64b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85702", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117240181716666474", "content": "CVE-2026-85702: Missing auth flaw in Freegpt Webui backend (\u2264098db3d) lets remote attackers abuse the Conversation API. CVSS 7.3. Exploit is public and unpatched. If you run this, disable remote access or roll back now. https://www.valtersit.com/cve/CVE-2026-85702/ #CVE #infosec", "creation_timestamp": "2026-09-09T08:40:15.036591Z"}, {"uuid": "cdf94f0c-eb97-42d4-a45e-1da32ac9f689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85704", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv63oh4ydn2x", "content": "CVE-2026-85704: Race condition in Freegpt Webui (Jailbreak Mode, server/config.py) allows remote attacks, but high complexity makes exploitation difficult. CVSS 3.7. Public exploit exists. No patch available.\n\nUpdate or monitor immediately. More: https://www.valtersit.com/cve/CVE", "creation_timestamp": "2026-09-10T12:50:16.646386Z"}, {"uuid": "f3c3ede9-d875-4e82-8c95-e90fa9b5df82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85704", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117246827971945397", "content": "CVE-2026-85704: Race condition in Freegpt Webui (Jailbreak Mode, server/config.py) allows remote attacks, but high complexity makes exploitation difficult. CVSS 3.7. Public exploit exists. No patch available.\nUpdate or monitor immediately. More: https://www.valtersit.com/cve/CVE", "creation_timestamp": "2026-09-10T12:50:19.571022Z"}, {"uuid": "43f23a02-1153-4e54-8710-f98b4fb740e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv7c2savxc2e", "content": "GitLab patched critical GitLab vulnerabilities, led by CVE-2026-85706 with a CVSS 10.0 score. Update your server now to protect source code from exposure.\n\n#GitLab #CVE202685706 #Vulnerabilities #DevSecOps #Cybersecurity\nsecurityonline.info/gitlab-vulne...", "creation_timestamp": "2026-09-11T00:17:16.620039Z"}, {"uuid": "717312b2-7e45-4a86-868a-2a30fd1fb1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mv7ooemhtb2t", "content": "GitLab\n\nFix path traversal issue in repository commits API that allowed unauthenticated users to read arbitrary files from the GitLab server (CVE-2026-85706)", "creation_timestamp": "2026-09-11T04:02:56.023323Z"}, {"uuid": "31f420da-6829-41f7-a2a1-22c460cc7ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85703", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mv7q7jmx6427", "content": "CVE-2026-85703: Freegpt Webui jailbreak mode flaw (getJailbreak) enables remote resource exhaustion. CVSS 6.5. Unpatched, exploit public. Rolling release\u2014check for fixes now. https://www.valtersit.com/cve/CVE-2026-85703/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T04:30:24.348229Z"}, {"uuid": "e5aa2dcd-1537-4972-a5de-c992d614448d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85703", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117250524708584807", "content": "CVE-2026-85703: Freegpt Webui jailbreak mode flaw (getJailbreak) enables remote resource exhaustion. CVSS 6.5. Unpatched, exploit public. Rolling release\u2014check for fixes now. https://www.valtersit.com/cve/CVE-2026-85703/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-11T04:30:25.508183Z"}, {"uuid": "c42e3b9d-05b5-4b5e-804b-a18c06affaad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mvajsegf4v25", "content": "GitLab Patches CVE-2026-85706: Path Traversal CVSS 10.0 in Self-Managed Instances", "creation_timestamp": "2026-09-11T12:08:20.582383Z"}, {"uuid": "eedfd42e-9e66-4ba4-a8a4-f95aeaad6491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/", "content": "GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. [...]", "creation_timestamp": "2026-09-11T13:00:37.738975Z"}, {"uuid": "499015f1-f450-447f-9b73-0accf6a304f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvandi6jbm2p", "content": "\ud83e\udd16 CVE-2026-85706 (max severity): path traversal in GitLab CE/EE. GitLab urges admins to patch their servers immediately.\nhttps://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/", "creation_timestamp": "2026-09-11T13:11:36.812771Z"}, {"uuid": "d843f59f-bfc2-46c3-b233-0ba6b638fce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mvanna6twm2d", "content": "Critical GitLab Vulnerabilities Exposed: Deep Dive into the CVSS 10.0 Path Traversal (CVE-2026-85706) & GraphQL\u00a0Exploits\n\nGitLab fixes CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal flaw, alongside\u2026\n\nhttps://thecybersecguru.com/news/gitlab-cve-2026-85706-cvss-10-path-traversal/", "creation_timestamp": "2026-09-11T13:17:10.628123Z"}, {"uuid": "02f233a2-055a-433c-b5b1-d3eb2aebde0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117252784631494872", "content": "GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. https://www.bleepingcomputer.com/news/security/gitlab-urges-users-to-patch-max-severity-path-traversal-flaw/", "creation_timestamp": "2026-09-11T14:05:08.778053Z"}, {"uuid": "69f96e27-9ad4-4d13-903c-13115a6ae2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q", "content": "\ud83d\udd17 CVE : CVE-2024-11222, CVE-2025-14871, CVE-2026-1168, CVE-2026-12910, CVE-2026-13210, CVE-2026-16794, CVE-2026-19619, CVE-2026-3855, CVE-2026-7514, CVE-2026-78252, CVE-2026-79708, CVE-2026-8030, CVE-2026-82837, CVE-2026-85706, CVE-2026-86340, CVE-2026-86341, CVE-2026-87719, CVE-2026-88765", "creation_timestamp": "2026-09-11T14:00:11.819453Z"}, {"uuid": "75dd2e9f-a009-4956-be63-de3fed078843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mvaqdgw3sk23", "content": "GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-09-11T14:05:17.070830Z"}, {"uuid": "6bdf8cdb-c986-4611-8f62-1dc20ad2a8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvatuco6p326", "content": "\ud83d\udcf0 GitLab Desak Pengguna Segera Menambal Celah Path Traversal Kritikal CVE-2026-85706\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/11/gitlab-cve-2026-85706-path-traversal/\n\n#cybersecurity #dataBreach #gitlab #keamanan #keamananSiber #kebocoranData #vulnerability", "creation_timestamp": "2026-09-11T15:08:22.740889Z"}, {"uuid": "49eeda29-a41d-4b2c-b1e4-ebd15c929ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvatugztyz2z", "content": "\ud83d\udcf0 GitLab Desak Pengguna Segera Menambal Celah Path Traversal Kritikal CVE-2026-85706\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/11/gitlab-cve-2026-85706-path-traversal/\n\n#potatosecurity #dataBreach #gitlab #keamanan #keamananSiber #kebocoranData #vulnerability", "creation_timestamp": "2026-09-11T15:08:27.075820Z"}, {"uuid": "1657a614-e5a6-4b74-a02e-461673183973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvaxudfxcs2t", "content": "GitLab\u306e\u8106\u5f31\u6027\u3001\u516c\u958b\u304b\u3089\u308f\u305a\u304b1\u65e5\u3067\u60aa\u7528\u3055\u308c\u308b\n\n\u653b\u6483\u5bfe\u8c61\u9818\u57df\u7ba1\u7406(ASM)\u4f01\u696d\u306eWatchTowr\u306b\u3088\u308b\u3068\u3001\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cGitLab\u3067\u65b0\u305f\u306b\u4fee\u6b63\u3055\u308c\u305f\u8106\u5f31\u6027\u3092\u3001\u516c\u958b\u304b\u3089\u308f\u305a\u304b1\u65e5\u3067\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u308b\u3053\u3068\u304c\u8b66\u544a\u3055\u308c\u3066\u3044\u307e\u3059\u3002 CVE-2026-85706(CVSS\u30b9\u30b3\u30a210/10)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30e6\u30fc\u30b6\u30fc\u304cGitLab\u30b5\u30fc\u30d0\u30fc\u4e0a\u306e\u4efb...", "creation_timestamp": "2026-09-11T16:19:59.166410Z"}, {"uuid": "21241cd9-61d9-41ff-896f-d1a895ce7210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://t.me/GithubRedTeam/102028", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #EXP\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-85706_docker_exp\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FlowerWitch\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-11 11:59:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-85706_docker_exp\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T16:00:04.571579Z"}, {"uuid": "54f743d3-742c-4e0d-b905-e91586ee8930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvay6abomo2g", "content": "A critical GitLab path traversal flaw (CVE-2026-85706) is being exploited in the wild, enabling unauthenticated arbitrary file reads; upgrade immediately.\n", "creation_timestamp": "2026-09-11T16:25:32.660395Z"}, {"uuid": "f1006b28-252b-4aa8-b86b-5ec5361eb902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvay6bxxza2l", "content": "GitLab\u306b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027 (CVE-2026-85706) \u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u30e6\u30fc\u30b6\u30fc\u306f\u76f4\u3061\u306b\u30d1\u30c3\u30c1\u9069\u7528\u304c\u5fc5\u8981\u3067\u3059\u3002", "creation_timestamp": "2026-09-11T16:25:33.948197Z"}, {"uuid": "65671694-bd1b-4f45-b3a0-17882c4417d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvay7bg4b42v", "content": "A critical GitLab path traversal flaw (CVE-2026-85706) is being exploited in the wild, enabling unauthenticated arbitrary file reads; upgrade immediately.\n", "creation_timestamp": "2026-09-11T16:26:05.912098Z"}, {"uuid": "4b1f0d1e-9e36-4abb-acc8-9b192e228ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3mvaycrguvb22", "content": "\ud83d\udea8GitLab releases 19.3.2, 19.2.6, 19.1.8 patch 2 critical CVEs:\n\nCVE-2026-85706: A 10.0 arbitrary file read via unauth path traversal in repo commits API, affecting CE and EE versions from 18.7.\n\nCVE-2026-87719: A 9.9 insecure deserialization via GraphQL subscription, affecting EE versions from 18.3.", "creation_timestamp": "2026-09-11T16:28:03.839124Z"}, {"uuid": "2bfc13c5-0b26-4a3b-8f07-10b6cf891201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mvayn2vxh52f", "content": "Critical CVSS 10 GitLab file-read flaw (CVE-2026-85706) under active exploit \u2014 upgrade now. #GitLab #Security #Vulnerability #CVSS10 #Cybersecurity #DevSecOps thedailytechfeed.com/gitlab-patch...", "creation_timestamp": "2026-09-11T16:33:49.771379Z"}, {"uuid": "f7072d26-41ae-47b1-a773-1f89fbc1bc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvazbwc2jw2q", "content": "GitLab patched CVE-2026-85706, a max-severity path traversal flaw that could expose credentials and sensitive data. watchTowr also reported early probing against exposed GitLab systems. #GitLab #CVE-2026-85706 #watchTowr", "creation_timestamp": "2026-09-11T16:45:28.953985Z"}, {"uuid": "926e10e1-bc35-47f3-b6a6-8ffa0201ab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117253536124011388", "content": "\ud83d\udcf0 GitLab Patches Critical CVSS 10.0 Path Traversal Vulnerability\nGitLab releases emergency patches for a critical CVSS 10.0 path traversal flaw (CVE-2026-85706). Unauthenticated attackers can read arbitrary files. Active scanning detected. Upgrade self-managed instances NOW. #GitLab #CVE #CyberSecurity #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/gitlab-urges-patching-of-critical-cvss-10-path-traversal-flaw/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-11T17:16:16.685986Z"}, {"uuid": "5090427b-7ea4-4ef9-85be-19eb1252c5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvb2zej7xf2i", "content": "GitLab releases emergency patches for a critical CVSS 10.0 path traversal flaw (CVE-2026-85706). Unauthenticated attackers can read arbitrary files. Active scanning detected. Upgrade self-managed instances NOW. #GitLab #CVE #CyberSecurity #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-11T17:16:28.973932Z"}, {"uuid": "2945ec77-93c8-44ab-a0b8-47e6e1118dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253567771400768", "content": "\ud83d\udea8 GitLab CVSS 10 vulnerability exploited just one day after disclosure\nThreat actors have begun exploiting CVE-2026-85706, a critical path traversal vulnerability affecting self-hosted GitLab Community and Enterprise Edition instances.\u2800The flaw allows an unauthenticated attacker to read arbitrary files from a vulnerable GitLab server using a single HTTP request.\nAffected versions include:\n\u2022 GitLab 18.7 through versions before 19.1.8\u2022 GitLab 19.2 through versions before 19.2.6\u2022 GitLab 19.3 through versions before 19.3.2\u2800GitLab disclosed and patched the vulnerability on September 10.\nJust one day later, watchTowr began observing in-the-wild exploitation attempts and warns that mass exploitation is likely to follow.\u2800Administrators should upgrade immediately to GitLab 19.1.8, 19.2.6, 19.3.2, or a newer supported release.\nGitLab.com is already patched.\nSource: https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/", "creation_timestamp": "2026-09-11T17:24:18.188298Z"}, {"uuid": "68719fc1-1833-400a-b00e-171106fe6f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117253591041343887", "content": "\ud83d\udea8 CVE-2026-85706: An unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7\u201319.1.7; 19.2.0\u201319.2.5; 19.3.0\u201319.3.1\nPoC: https://github.com/guneykabel/cve-2026-85706", "creation_timestamp": "2026-09-11T17:30:13.249156Z"}, {"uuid": "85842eed-947c-4896-b50c-3b1024befa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mvb45g4e4t2t", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab repository commits API, allowing arbitrary file reads and credential exposure via in-the-wild probes.\n", "creation_timestamp": "2026-09-11T17:36:39.232556Z"}, {"uuid": "a7421f4f-c327-4a58-ac18-9631c9e774f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mvb4b3dzop23", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab repository commits API, allowing arbitrary file reads and credential exposure via in-the-wild probes.\n", "creation_timestamp": "2026-09-11T17:38:41.611456Z"}, {"uuid": "6246f819-f41c-46c5-9adc-fee1ce393407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvb4bcecvt2g", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab repository commits API, allowing arbitrary file reads and credential exposure via in-the-wild probes.\n", "creation_timestamp": "2026-09-11T17:38:49.159978Z"}]}