CVE-2026-85706

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read CVE-2026-85706 is a critical path-traversal / missing-authentication issue in the GitLab CE/EE Repository Commits and Repository Files APIs: an unauthenticated attacker can make the server read arbitrary files and obtain their...

gitread

gitread PoC for CVE-2026-85706, an unauthenticated arbitrary file read affecting self-managed GitLab CE/EE. | ---|--- CVE| CVE-2026-85706 CVSS| 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Affected| 18.7 to 19.1.7, 19.2.0 to 19.2.5, 19.3.0 to 19.3.1 Fixed| 19.1.8 / 19.2.6 / 19.3.2 released 2026-09-10...

CVE-2026-60010 Gitea organization team policy bypass through repository API

Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...

CVE-2026-60010

Gitea versions

CVE-2026-60010 Gitea organization team policy bypass through repository API

Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAccess being disabled. The endpoint does not enforce the organization's restriction on repository administrators changin...

Exploit for CVE-2026-85706

CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local f...

CVE-2026-49170

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2026-41696 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1), com.kurento.kmf:kmf-repository-api (4.3.1) +4 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.5.1.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.kurento.kmf:kmf-content-api =3.0.5, =5.0.3, =1.0.3.release,...

CVE-2021-43822

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...

com.github.jknack:mwa-mongo (>=0.4.1, <=0.4.2), com.github.jknack:mwa-morphia (>=0.4.1, <=0.4.2) +7 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (1.3.2.release)

org.springframework.data:spring-data-mongodb MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - com.github.jknack:mwa-mongo =0.4.1, =0.4.1, =4.1.0, =3.0.6,...

CVE-2021-43822

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...

Sql injection

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...

CVE-2021-43822

CVE-2021-43822 concerns SQL injection in the Jackalope Doctrine-DBAL PHPCR implementation. The vulnerability arises because the component that translates the query object model into Doctrine DBAL queries does not properly escape certain user-controlled identifiers (node names and xpaths), allowin...

CVE-2021-43822 SQL injection in jackalope/jackalope-doctrine-dbal

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API PHPCR using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to resolve this issue. If that is not possible...