Git Lab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
GitLab patched CVE-2026-85706, a CVSS 10.0 path traversal flaw in the repository commits API that lets an unauthenticated user read arbitrary files from the server under certain conditions, with in-the-wild probes observed from 06:00 UTC on September 11,...