Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Rapid7
Rapid7
Published September 14, 2026Original Report

Excerpt

Overview On September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE). The release addresses CVE-2026-85706 , a critical path traversal vulnerability ( CWE-22 ) in the repository commits API with a CVSSv3.1 score of 10.0 . According to GitLab, improper path confinement and missing authentication enforcement could allow an unauthenticated user to read arbitrary files from an affected GitLab server under certain…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-85706HighScore 76/100First seen
CVECVE-2026-87719MediumScore 54/100First seen

IOC Relationship Graph

Building graph…