Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
CVE-2026-85706: Critical GitLab Unauthenticated Arbitrary File Read Vulnerability (CVSS 10.0)
Excerpt
CVE-2026-85706 affects the POST /api/v4/projects/:id/repository/commits endpoint. Due to the body-upload helper processing the file.path parameter before authentication and failing to restrict it to repository paths, an unauthenticated attacker can cause GitLab to read arbitrary files accessible to the GitLab service process. The vulnerability can be exploited by URL-encoding one character in the commits route—for example, using %63ommits, which bypasses GitLab Workhorse…
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-85706 | High | Score 76/100 | First seen |
IOC Relationship Graph
Building graph…