BAD SECURITY GLOBAL

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.

Dark Reading 4 newsrooms Mon, 14 Sep 2026 20:19

Read the original at Dark Reading ↗

Also reported by 3 other newsrooms

TechRadarCISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately The RegisterPerfect-10 GitLab bug under attack days after patch lands BleepingComputerCISA: Hackers now exploit max severity GitLab flaw in attacks