{"uuid": "91420863-caed-4225-b77d-d78a79367cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://gist.github.com/ichintu/b2551ef3f508cdf69182327288db5ab0", "content": "A critical, actively exploited vulnerability (CVE-2026-85706, CVSS 10.0) affects GitLab CE/EE versions 18.7\u201319.1.7, 19.2\u201319.2.5, and 19.3\u201319.3.1. It allows unauthenticated attackers to read arbitrary files due to improper path confinement and missing authentication in the repository commits API. The issue was disclosed on September 12, 2026.", "creation_timestamp": "2026-09-12T08:02:37.834616Z"}