The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical GitLab path traversal vulnerability, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog after evidence that the flaw is being actively exploited. The vulnerability affects both GitLab Community Edition (CE) and Enterprise Edition (EE). CVE-2026-85706 allows an unauthenticated attacker to read arbitrary files […]
The post CISA Warns of Critical GitLab Path Traversal Flaw Exploited to Read Arbitrary Server Files appeared first on Cyber Security News.