Critical GitLab flaw reportedly being exploited in the wild
A tech roundup says CVE-2026-85706 lets attackers read arbitrary files from self-managed GitLab servers without authentication.
TLDR
A tech roundup shared on September 14, 2026, reports active exploitation of GitLab’s critical CVE-2026-85706 flaw. It says the vulnerability allows unauthenticated attackers to read arbitrary files from self-managed servers.
Combined views
709
1 Source, first seen ago