> TritonInfoSec News
Home / Sep 15, 2026 / Story
0
#3 BleepingComputer general September 14, 2026 at 07:06 UTC

CISA: Hackers now exploit max severity GitLab flaw in attacks

By Sergiu Gatlan

AI Summary

CISA issued a warning that threat actors are actively exploiting CVE-2026-85706, the maximum-severity GitLab path traversal flaw, in real-world attacks against internet-facing GitLab instances. Organizations running unpatched GitLab CE or EE deployments should treat this as an emergency remediation priority given CISA's active exploitation confirmation.

Read full article → https://www.bleepingcomputer.com/news/security/cis…

Relevance score: 90.0/100

# More from September 15

  1. 1
    Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation SecurityWeek
  2. 2
    Maximum Severity GitLab Flaw Puts Supply Chains at Risk Dark Reading
  3. 4
    'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink Dark Reading
  4. 5
    Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries The Hacker News
  5. 6
    Three JFrog Artifactory Flaws Exploited for Backdoor Deployment SecurityWeek
  6. 7
    ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks SecurityWeek
  7. 8
    Revolut discloses data breach exposing financial info, passports BleepingComputer
  8. 9
    New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing The Hacker News
  9. 10
    Microsoft’s Patching Schneier on Security