Known Exploited Vulnerabilities September 11, 2026 · CISA KEV Catalog

CVE-2026-85706: Git Lab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2026-85706GitLab

Related

CVE-2026-97229: Git Lab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026

CVE-2021-22175: Git Lab Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Feb 18, 2026

CVE-2021-39935: Git Lab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Feb 03, 2026