news
Offensive Security
September 28th, 2026 at 4:54 PMCVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API
CVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). The post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API appeared first on OffSec .
#open_source
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.05
Engagement proxy: 0
Canonical link: https://www.offsec.com/blog/cve-2026-85706/