CVE-2026-85706 - GitLab Community Edition and Enterprise Edition - CISA Known Exploited Vulnerabilities

Nundina › Discover calendars › CISA Known Exploited Vulnerabilities calendar › CVE-2026-85706 - GitLab Community Edition and Enterprise EditionCVE-2026-85706 - GitLab Community Edition and Enterprise Edition11 September 2026GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability. GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow...CISA Known Exploited Vulnerabilities calendarMore from this calendar