Malicious Actors Already Using Critical GitLab Flaw, CISA and Others Warn
The flaw can let unauthenticated attackers read files and secrets, and watchTowr said probes were already appearing in the wild.
- On Friday, the Cybersecurity and Infrastructure Security Agency added CVE-2026-85706 to its Known Exploited Vulnerabilities Catalog, giving federal agencies until Monday to mitigate risks from the critical GitLab flaw.
- GitLab assigned the flaw a maximum 10 severity score due to improper path confinement and missing authentication in its API, allowing attackers to read arbitrary files without logging in.
- Intelligence analysts from watchTowr reported observing in-the-wild probes on Friday; GitLab shipped patches on September 10 for versions 19.3.2, 19.2.6, and 19.1.8.
- CISA officials warned the flaw poses "significant risks to the federal enterprise," while encouraging all organizations to prioritize remediation of KEV Catalog vulnerabilities regardless of Binding Operational Directive 26-04 applicability.
- GitLab patched a second vulnerability, CVE-2026-87719, on Thursday, as Hong Kong's computer emergency response team issued an advisory on Monday warning the initial flaw was being exploited.
11 Articles
11 Articles
CISA Warns of Active Exploitation of Critical GitLab Flaw
CISA warns attackers are exploiting a critical GitLab flaw that exposes server files, credentials and development pipelines. Learn how to respond. The post CISA Warns of Active GitLab Exploitation as Attackers Target Server Files appeared first on eSecurity Planet.
GitLab server product finds vulnerability being exploited by hackers - urgent update recommended
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new GitLab vulnerability to the KEV catalog, warning customers of the platform that it is being actively exploited by cybercriminals in real-world attacks. Photo credit: Fotis Fotopoulos / unsplash.com
Just a few days after the release of a patch for 18 vulnerabilities in GitLab, security researchers are watching first attempts to attack. Both the community and enterprise editions are affected. The BSI advises on timely action. Tags: #BSI
CISA Adds One Known Exploited Vulnerability to Catalog
CISA Adds One Known Exploited Vulnerability to Catalog ggaylor Sep 14, 2026 Release DateSeptember 14, 2026 DescriptionCISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.CVE-2026-76461 Cisco Secure Email Gateway SQL Injection VulnerabilityThis type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal ent…
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
