https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:13:20 +0000 https://vulnerability.circl.lu/sighting/740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6/export {"uuid": "740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwyc2q546e2j", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:56.565255Z"} {"uuid": "740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwyc2q546e2j", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:56.565255Z"} https://vulnerability.circl.lu/sighting/740ea2ce-cd23-4bcb-80c5-fa83e9ea51c6/export Sat, 03 Oct 2026 16:18:56 +0000 https://vulnerability.circl.lu/sighting/e0d427ff-22b1-4b7f-b6b7-fdab1967cb25/export {"uuid": "e0d427ff-22b1-4b7f-b6b7-fdab1967cb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwybzkffmh22", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:17.185496Z"} {"uuid": "e0d427ff-22b1-4b7f-b6b7-fdab1967cb25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mwybzkffmh22", "content": "CVE-2026-85706 enables unauthenticated path traversal in GitLab to read arbitrary server files, with confirmed in-the-wild exploitation and a CVSS 10.0 impact.\n", "creation_timestamp": "2026-10-03T16:18:17.185496Z"} https://vulnerability.circl.lu/sighting/e0d427ff-22b1-4b7f-b6b7-fdab1967cb25/export Sat, 03 Oct 2026 16:18:17 +0000 https://vulnerability.circl.lu/sighting/d29e9c80-53f1-4a0f-9664-fa8622335ace/export {"uuid": "d29e9c80-53f1-4a0f-9664-fa8622335ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mws6cf2wxv2f", "content": "\u2022 GitLab (CVE-2026-85706) et Apple (CVE-2026-86950) : avis CERT-FR, vuln\u00e9rabilit\u00e9s activement exploit\u00e9es. Patchez vite.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1242/\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1236/", "creation_timestamp": "2026-10-01T05:55:39.857284Z"} {"uuid": "d29e9c80-53f1-4a0f-9664-fa8622335ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mws6cf2wxv2f", "content": "\u2022 GitLab (CVE-2026-85706) et Apple (CVE-2026-86950) : avis CERT-FR, vuln\u00e9rabilit\u00e9s activement exploit\u00e9es. Patchez vite.\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1242/\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1236/", "creation_timestamp": "2026-10-01T05:55:39.857284Z"} https://vulnerability.circl.lu/sighting/d29e9c80-53f1-4a0f-9664-fa8622335ace/export Thu, 01 Oct 2026 05:55:39 +0000 https://vulnerability.circl.lu/sighting/a4983d44-2ba0-49c1-8d45-ca8d9c943e33/export {"uuid": "a4983d44-2ba0-49c1-8d45-ca8d9c943e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeymb6no2x", "content": "\ud83d\udd17 CVE : CVE-2026-85706, CVE-2026-87719", "creation_timestamp": "2026-09-30T12:50:08.676957Z"} {"uuid": "a4983d44-2ba0-49c1-8d45-ca8d9c943e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwqeymb6no2x", "content": "\ud83d\udd17 CVE : CVE-2026-85706, CVE-2026-87719", "creation_timestamp": "2026-09-30T12:50:08.676957Z"} https://vulnerability.circl.lu/sighting/a4983d44-2ba0-49c1-8d45-ca8d9c943e33/export Wed, 30 Sep 2026 12:50:08 +0000 https://vulnerability.circl.lu/sighting/811caf3d-0545-488e-bbca-47eefb0a243a/export {"uuid": "811caf3d-0545-488e-bbca-47eefb0a243a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/orteliusos.bsky.social/post/3mwpo4e7vah2d", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-30T06:00:38.771376Z"} {"uuid": "811caf3d-0545-488e-bbca-47eefb0a243a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/orteliusos.bsky.social/post/3mwpo4e7vah2d", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-30T06:00:38.771376Z"} https://vulnerability.circl.lu/sighting/811caf3d-0545-488e-bbca-47eefb0a243a/export Wed, 30 Sep 2026 06:00:38 +0000 https://vulnerability.circl.lu/sighting/2f3511f3-0510-41e6-a8c0-71c5bdc19d16/export {"uuid": "2f3511f3-0510-41e6-a8c0-71c5bdc19d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mwolyqhjec25", "content": "GitLab Patches Critical Unauthenticated Path Traversal Flaw | CVE-2026-85706\n\nFollow for more weekly cybersecurity news\n\n#cybersecurity #cybersecuritynews", "creation_timestamp": "2026-09-29T19:50:15.640139Z"} {"uuid": "2f3511f3-0510-41e6-a8c0-71c5bdc19d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mwolyqhjec25", "content": "GitLab Patches Critical Unauthenticated Path Traversal Flaw | CVE-2026-85706\n\nFollow for more weekly cybersecurity news\n\n#cybersecurity #cybersecuritynews", "creation_timestamp": "2026-09-29T19:50:15.640139Z"} https://vulnerability.circl.lu/sighting/2f3511f3-0510-41e6-a8c0-71c5bdc19d16/export Tue, 29 Sep 2026 19:50:15 +0000 https://vulnerability.circl.lu/sighting/07eda99a-41f4-4095-ba0f-765c17f5f4fd/export {"uuid": "07eda99a-41f4-4095-ba0f-765c17f5f4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/tracyragan.bsky.social/post/3mwnyrq5hf22c", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-29T14:06:13.875995Z"} {"uuid": "07eda99a-41f4-4095-ba0f-765c17f5f4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://bsky.app/profile/tracyragan.bsky.social/post/3mwnyrq5hf22c", "content": "A CVE GitLab users should know about: CVE-2026-85706, an attacker can abuse the repo commits API to make GitLab read arbitrary files from the server, potentially exposing sensitive files, credentials, configuration, or secrets. GitLab issued emergency fixes on September 10. https://cstu.io/b51b4b", "creation_timestamp": "2026-09-29T14:06:13.875995Z"} https://vulnerability.circl.lu/sighting/07eda99a-41f4-4095-ba0f-765c17f5f4fd/export Tue, 29 Sep 2026 14:06:13 +0000 https://vulnerability.circl.lu/sighting/cc17f404-b70f-4357-968a-b2df8a297b76/export {"uuid": "cc17f404-b70f-4357-968a-b2df8a297b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "Telegram/nFA00ixIsgHyNXSNZE1vxHvOwqh4w7VlKhPXveJ41Rvetmc", "content": "", "creation_timestamp": "2026-09-29T04:13:29.000000Z"} {"uuid": "cc17f404-b70f-4357-968a-b2df8a297b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "Telegram/nFA00ixIsgHyNXSNZE1vxHvOwqh4w7VlKhPXveJ41Rvetmc", "content": "", "creation_timestamp": "2026-09-29T04:13:29.000000Z"} https://vulnerability.circl.lu/sighting/cc17f404-b70f-4357-968a-b2df8a297b76/export Tue, 29 Sep 2026 04:13:29 +0000 https://vulnerability.circl.lu/sighting/5542b571-ef6e-4400-93e0-1decc5c6bc4f/export {"uuid": "5542b571-ef6e-4400-93e0-1decc5c6bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} {"uuid": "5542b571-ef6e-4400-93e0-1decc5c6bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "seen", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} https://vulnerability.circl.lu/sighting/5542b571-ef6e-4400-93e0-1decc5c6bc4f/export Mon, 28 Sep 2026 17:48:40 +0000 https://vulnerability.circl.lu/sighting/77528bc0-8a17-4c45-a3bc-d4598fb0ebad/export {"uuid": "77528bc0-8a17-4c45-a3bc-d4598fb0ebad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} {"uuid": "77528bc0-8a17-4c45-a3bc-d4598fb0ebad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-85706", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/55996", "content": "CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API\nhttps://www.offsec.com/blog/cve-2026-85706/\n\nCVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). \nThe post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API (https://www.offsec.com/blog/cve-2026-85706/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2026-09-28T17:48:40.000000Z"} https://vulnerability.circl.lu/sighting/77528bc0-8a17-4c45-a3bc-d4598fb0ebad/export Mon, 28 Sep 2026 17:48:40 +0000