https://www.live-feeds.com/feed/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosureContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosurehttps://www.live-feeds.com/feed/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosure#u69700Wed, 16 Sep 2026 02:31:32 +0000The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-85706 to its Known Exploited Vulnerabilities catalog. This maximum-severity path traversal flaw carries a CVSS score of 10.0 and allows unauthenticated attackers to read arbitrary files via a single HTTP request to the commits-API. Malicious actors are actively exploiting the vulnerability to access sensitive files within software development environments. CISA and other security entities warn that these attacks are ongoing, urging immediate patching to prevent unauthorized data access.Why it mattersThe vulnera https://www.live-feeds.com/feed/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosurehttps://www.live-feeds.com/feed/gitlab-cvss-10-file-read-flaw-draws-in-the-wild-probes-after-disclosure#u67620Mon, 14 Sep 2026 07:50:06 +0000GitLab urges users to patch a maximum-severity path traversal vulnerability carrying a CVSS score of 10.0, identified as CVE-2026-85706. The flaw allows unauthenticated attackers to read arbitrary files using a single HTTP request via the commits-API. Within hours of disclosure, security researchers and threat actors initiated internet-wide probing and active exploitation of the vulnerability. The U.S. Cybersecurity and Infrastructure Security Agency warned that hackers are now exploiting the max severity GitLab flaw in attacks.Why it mattersGitLab issued emergency security updates to address