https://vulnerability.circl.lu/sightings/feed 2026-09-15T12:18:07.129395+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6241564d-436c-4403-be61-8a8c426bcc95/export 2026-09-15T12:18:07.163116+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6241564d-436c-4403-be61-8a8c426bcc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/merrua.bsky.social/post/3mvkcw2gzwk25", "content": "www.theregister.com/security/202... \"CVE-2026-85706 to its Known Exploited Vulnerabilities catalog.\"", "creation_timestamp": "2026-09-15T09:31:48.205634Z"} 2026-09-15T09:31:48.205634+00:00 https://vulnerability.circl.lu/sighting/89cdf0c6-7827-4a16-88cf-0bfc2eddd49b/export 2026-09-15T12:18:07.165813+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "89cdf0c6-7827-4a16-88cf-0bfc2eddd49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.907703Z"} 2026-09-15T06:38:06.907703+00:00 https://vulnerability.circl.lu/sighting/08f698df-2f0c-468e-92fc-8f7e1526d7b6/export 2026-09-15T12:18:07.165958+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08f698df-2f0c-468e-92fc-8f7e1526d7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvjtv6xzqn2z", "content": "Daily IT Security Digest \u2014 2026-09-15\nhttps://infosec.exchange/@offseq/117251586510013041\n\n## 2. GitLab Path Traversal Exploited in the Wild (CRITICAL \u2014 CVSS 10)\n\nRapid7 has reported that CVE-2026-85706, a critical path traversal vulnerability in GitLab, is being actively exploited to steal files", "creation_timestamp": "2026-09-15T05:02:50.255148Z"} 2026-09-15T05:02:50.255148+00:00 https://vulnerability.circl.lu/sighting/49ec5cd7-0d95-410c-81cf-ef8fdff2dd9a/export 2026-09-15T12:18:07.166070+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "49ec5cd7-0d95-410c-81cf-ef8fdff2dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://gist.github.com/ichintu/ab20711bf02f5b35c139371e41389621", "content": "This daily threat intelligence digest highlights three high-impact vulnerabilities:\n\n\u2022 **CVE-2026-91771 (Weights & Biases, 8.8):** Path traversal in `File.download` (wandb < 0.29.0) allows attackers to write files outside intended directories, potentially enabling remote code execution.\n\u2022 **CVE-2026-90843 (SabyasachiRana WebMap, 8.3):** Remote OS command injection in the `nmap_newscan` function. Publicly exploited; a silent patch is available.\n\u2022 **CVE-2026-85706 (GitLab, 10.0):** Critical unauthenticated path traversal in the repository commits API affects GitLab CE/EE (versions prior to 19.1.8, 19.2.6, and 19.3.2). Enables arbitrary file reads, risking credential theft and CI/CD compromise. Actively exploited, CISA KEV-listed, and patched.\n\n**Recommended Actions:** Prioritize immediate GitLab patching. Hunt logs for malicious API requests, rotate any potentially exposed credentials, and enforce strict access controls and API monitoring across all affected platforms.", "creation_timestamp": "2026-09-15T04:02:20.162115Z"} 2026-09-15T04:02:20.162115+00:00 https://vulnerability.circl.lu/sighting/b39d0ad8-ce30-4b60-bc60-4627024237c1/export 2026-09-15T12:18:07.166179+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b39d0ad8-ce30-4b60-bc60-4627024237c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvjqicbqfj24", "content": "1/ GITLAB: CVE-2026-85706 \u2014 missing auth enforcement in repo commits API; unauth attackers read secrets/files in one HTTP POST. WatchTowr sees in-the-wild probes; CISA BOD 26-04 requires federal fix by Sept 14. Patch to 19.3.2/19.2.6/19.1. Src: BleepingComputer, DarkReading", "creation_timestamp": "2026-09-15T04:01:56.058220Z"} 2026-09-15T04:01:56.058220+00:00 https://vulnerability.circl.lu/sighting/f2c799c2-51b7-4ee3-950e-b31412c12cdd/export 2026-09-15T12:18:07.166280+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f2c799c2-51b7-4ee3-950e-b31412c12cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvjqhw35zg2l", "content": "\ud83d\udea8 BREAKING: CISA confirms active exploitation of GitLab CVE-2026-85706 (path traversal, unauth file read) \u2014 add to KEV catalog, 3-day federal patch deadline. Sandworm chains Cisco CVE-2026-20079 auth bypass \u2192 Cyclops Blink. DDRop hardware attack breaks Intel TDX / AMD SEV-SNP confidential computi...", "creation_timestamp": "2026-09-15T04:01:43.058426Z"} 2026-09-15T04:01:43.058426+00:00 https://vulnerability.circl.lu/sighting/c66de9d0-0364-491f-93d8-5c7c46406eda/export 2026-09-15T12:18:07.166382+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c66de9d0-0364-491f-93d8-5c7c46406eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-85706", "type": "seen", "source": "https://bsky.app/profile/goodtech.info/post/3mvjoy32ucoec", "content": "Score parfait de 10.0 et exploitation en 24 heures : comment la faille de GitLab met \u00e0 nu les serveurs\n\n\ud83d\udca5 Un score parfait de 10.0 sur l'\u00e9chelle CVSS et des attaques d\u00e9tect\u00e9es en moins de 24 heures ! Le CERT-FR et la CISA...\n\nhttps://goodtech.info/gitlab-faille-critique-cve-2026-85706-cisa-cert-fr/", "creation_timestamp": "2026-09-15T03:35:06.431285Z"} 2026-09-15T03:35:06.431285+00:00 https://vulnerability.circl.lu/sighting/d2eaad64-3614-4ca0-b4f6-b2aabf030875/export 2026-09-15T12:18:07.166477+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d2eaad64-3614-4ca0-b4f6-b2aabf030875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/cryptovkanews.bsky.social/post/3mvjo4xw3uo2s", "content": "\ud83d\udea8 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-85706 \u0432 GitLab! \ud83d\udea8 \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u0420\u0438\u0441\u043a: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u0438\u043a\u043e\u0432 \u0441\u043c\u0430\u0440\u0442-\u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u043e\u0432, API-\u0442\u043e\u043a\u0435\u043d\u043e\u0432. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 GitLab \u0434\u043e 19.1.8, 19.2.6 \u0438\u043b\u0438 19.3.2! #GitLab #\u043a\u0440\u0438\u043f\u0442\u043e #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-09-15T03:19:49.402219Z"} 2026-09-15T03:19:49.402219+00:00 https://vulnerability.circl.lu/sighting/8b65e5bc-2013-4de9-a5d6-6d29fa45a0a7/export 2026-09-15T12:18:07.166597+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8b65e5bc-2013-4de9-a5d6-6d29fa45a0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvjnx4vpi624", "content": "If you run GitLab, CVE-2026-85706 (CVSS 10.0) unauthenticated path traversal is being exploited in the wild \u2014 apply the vendor patch now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-15T03:16:32.941445Z"} 2026-09-15T03:16:32.941445+00:00 https://vulnerability.circl.lu/sighting/af199268-0ade-4b53-bee8-32afbf67ff7f/export 2026-09-15T12:18:07.166782+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "af199268-0ade-4b53-bee8-32afbf67ff7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mvjnfxzduv2g", "content": "\ud83d\udfe2 Developers Urge Immediate Fix for Critical GitLab Vulnerability\n\n\ud83d\udde8\ufe0f GitLab engineers have released patches for the critical CVE-2026-85706 vulnerability, which received the maximum CVSS sc\u2026\n\n#news", "creation_timestamp": "2026-09-15T03:06:57.476563Z"} 2026-09-15T03:06:57.476563+00:00