Critical GitLab Vulnerability CVE-2026-85706 Being Actively Exploited
A critical path-traversal flaw (CVE-2026-85706, CVSS 10.0) in GitLab allows unauthenticated attackers to read arbitrary files on self-managed servers. CISA added it to its Known Exploited Vulnerabilities catalog as active exploitation continues.