CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

26587 matches found

Rapid7 Vulnerability Database (full)•added 2026/09/12 12:00 a.m.•5 views

CVE-2026-85706: Improper Limitation of a Pathname to a Restricted Directory

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to...

10CVSS8.4AI score0.92956EPSS

SaveExploits17References5

Rapid7 Vulnerability Database (full)•added 2026/09/12 12:00 a.m.•4 views

CVE-2026-87719: Deserialization of Untrusted Data

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could allow an authenticated user with Duo Chat access to obtain Advanced Search instance...

9.9CVSS5.7AI score0.00571EPSS

SaveExploits0References3

GithubExploit•added 2026/09/11 9:26 p.m.•39 views

Exploit for CVE-2026-85706

GitLabSniper CVE-2026-85706 — GitLab CE/EE unauthenticated a...

8.2AI score0.92956EPSS

SaveExploits17

The Hacker News•added 2026/09/11 4:30 p.m.•21 views

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 CVSS score: 10.0, a path traversal issue in the repository commits AP...

10CVSS8AI score0.92956EPSS

SaveExploits17

GithubExploit•added 2026/09/11 4:18 p.m.•59 views

Exploit for CVE-2026-85706

CVE-2026-85706: GitLab CE/EE allows arbitrary file reading wit...

8.7AI score0.92956EPSS

SaveExploits17

GithubExploit•added 2026/09/11 3:58 p.m.•34 views

Exploit for CVE-2026-85706

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local f...

8.7AI score0.92956EPSS

SaveExploits17

GithubExploit•added 2026/09/11 3:24 p.m.•35 views

Exploit for CVE-2026-85706

cve-2026-85706 Unauthenticated arbitrary local file read in G...

8.4AI score0.92956EPSS

SaveExploits17

CISA•added 2026/09/11 12:00 p.m.•17 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-85706link is external GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for...

10CVSS8.4AI score0.92956EPSS

SaveIn wildExploits17References6