https://vulnerability.circl.lu/sightings/feed 2026-10-04T06:13:20.790716+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6/export 2026-10-04T06:13:20.818609+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwyc2q546e2j", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:56.565255Z"} 2026-10-03T16:18:56.565255+00:00 https://vulnerability.circl.lu/sighting/e0d427ff-22b1-4b7f-b6b7-fdab1967cb25/export 2026-10-04T06:13:20.820887+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e0d427ff-22b1-4b7f-b6b7-fdab1967cb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwybzkffmh22", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:17.185496Z"} 2026-10-03T16:18:17.185496+00:00 https://vulnerability.circl.lu/sighting/d29e9c80-53f1-4a0f-9664-fa8622335ace/export 2026-10-04T06:13:20.821038+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d29e9c80-53f1-4a0f-9664-fa8622335ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mws6cf2wxv2f", "content": "\u2022 GitLab (CVE-2026-85706) et Apple (CVE-2026-86950) : avis CERT-FR, vuln\u00e9rabilit\u00e9s activement exploit\u00e9es. Patchez vite.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1242/\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1236/", "creation_timestamp": "2026-10-01T05:55:39.857284Z"} 2026-10-01T05:55:39.857284+00:00 https://vulnerability.circl.lu/sighting/a4983d44-2ba0-49c1-8d45-ca8d9c943e33/export 2026-10-04T06:13:20.821158+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a4983d44-2ba0-49c1-8d45-ca8d9c943e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeymb6no2x", "content": "\ud83d\udd17 CVE : CVE-2026-85706, CVE-2026-87719", "creation_timestamp": "2026-09-30T12:50:08.676957Z"} 2026-09-30T12:50:08.676957+00:00 https://vulnerability.circl.lu/sighting/811caf3d-0545-488e-bbca-47eefb0a243a/export 2026-10-04T06:13:20.821266+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "811caf3d-0545-488e-bbca-47eefb0a243a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/orteliusos.bsky.social/post/3mwpo4e7vah2d", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-30T06:00:38.771376Z"} 2026-09-30T06:00:38.771376+00:00 https://vulnerability.circl.lu/sighting/2f3511f3-0510-41e6-a8c0-71c5bdc19d16/export 2026-10-04T06:13:20.821374+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2f3511f3-0510-41e6-a8c0-71c5bdc19d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mwolyqhjec25", "content": "GitLab Patches Critical Unauthenticated Path Traversal Flaw | CVE-2026-85706\n\nFollow for more weekly cybersecurity news\n\n#cybersecurity #cybersecuritynews", "creation_timestamp": "2026-09-29T19:50:15.640139Z"} 2026-09-29T19:50:15.640139+00:00 https://vulnerability.circl.lu/sighting/07eda99a-41f4-4095-ba0f-765c17f5f4fd/export 2026-10-04T06:13:20.821484+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "07eda99a-41f4-4095-ba0f-765c17f5f4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/tracyragan.bsky.social/post/3mwnyrq5hf22c", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-29T14:06:13.875995Z"} 2026-09-29T14:06:13.875995+00:00 https://vulnerability.circl.lu/sighting/cc17f404-b70f-4357-968a-b2df8a297b76/export 2026-10-04T06:13:20.821595+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cc17f404-b70f-4357-968a-b2df8a297b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "Telegram/nFA00ixIsgHyNXSNZE1vxHvOwqh4w7VlKhPXveJ41Rvetmc", "content": "", "creation_timestamp": "2026-09-29T04:13:29.000000Z"} 2026-09-29T04:13:29+00:00 https://vulnerability.circl.lu/sighting/5542b571-ef6e-4400-93e0-1decc5c6bc4f/export 2026-10-04T06:13:20.821698+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5542b571-ef6e-4400-93e0-1decc5c6bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} 2026-09-28T17:48:40+00:00 https://vulnerability.circl.lu/sighting/77528bc0-8a17-4c45-a3bc-d4598fb0ebad/export 2026-10-04T06:13:20.821805+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "77528bc0-8a17-4c45-a3bc-d4598fb0ebad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} 2026-09-28T17:48:40+00:00