CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...

GitLabSniper

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated arbitrary file read detect · public project enum · loot · interactive shell · subfinder/httpx pipeline Author: Yunus Emre Öztaş mitsec X: x.com/ynsmroztas GitHub: github.com/ynsmroztas Site: ynsmroztas.github.io Mail: [email protected]...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-runner, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-runner-fips...

CVE-2026-85706 vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-runner...

Exploit for CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read...

Exploit for CVE-2026-85706

CVE-20...

Vulnerability handling is handled differently in GitLab Community and Enterprise editions.

GitLab has identified a vulnerability in both the Community and Enterprise editions of the platform. The vulnerability resides in the repository commit API, where path traversal is possible. As a result, unauthenticated users can read arbitrary files on the system. The root cause of the...

CVE-2026-85706

creationtimestamp| type| source ---|---|--- 2026-09-11 00:17:16+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7c2savxc2e 2026-09-11 04:02:56+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3mv7ooemhtb2t 2026-09-11 12:08:20+00:00| seen|...