{"uuid": "f8c4e566-6a6c-41fc-9b3b-eee0c36f1165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/bhinfosecurity.bsky.social/post/3mvl6a4xflz23", "content": "Hunting CVE-2026-85706 in GitLab logs? \nA 400 saying \"branch is required\" is not a failed attempt. It means the file was read.\n \nWe proved it by planting files with known contents and watching the error change.\n\nhttps://activesoc.blackhillsinfosec.com/blog/the-gitlab-exploit-with-no-traversal-in-it/", "creation_timestamp": "2026-09-15T17:40:34.356937Z"}