> TritonInfoSec News
Home / Sep 12, 2026 / Story
0
#1 The Hacker News general September 11, 2026 at 16:30 UTC

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

By [email protected] (The Hacker News)

AI Summary

CVE-2026-85706, a CVSS 10.0 path traversal flaw in GitLab's repository commits API, allows unauthenticated attackers to read arbitrary files from self-managed GitLab servers. Internet-wide probing began within hours of public disclosure, making this an urgent patch priority for any organization running self-hosted GitLab instances.

Read full article → https://thehackernews.com/2026/09/gitlab-cvss-10-f…

Relevance score: 88.0/100

# More from September 12

  1. 2
    Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware The Hacker News
  2. 3
    Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors The Hacker News
  3. 4
    AI-powered attack exploited PaperCut flaws to hack 395 organizations BleepingComputer
  4. 5
    Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection The Hacker News
  5. 6
    China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor The Hacker News
  6. 7
    Critical NetScaler Vulnerability Exploited in Attacks SecurityWeek
  7. 8
    Trezor: 347,000 users targeted in phishing attacks after Brevo breach BleepingComputer
  8. 9
    Florida confirms DMV database breached via stolen police account BleepingComputer
  9. 10
    Ukrainian hacker gets four years in US prison over Conti ransomware attacks The Record