> TritonInfoSec News
Home / Sep 15, 2026 / Story
0
#2 Dark Reading general September 14, 2026 at 20:19 UTC

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

By Rob Wright

AI Summary

CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability affecting both GitLab Community Edition and Enterprise Edition, and CISA has confirmed active exploitation in the wild. The maximum severity score and GitLab's widespread use in software development pipelines makes this a critical supply chain risk requiring immediate patching.

Read full article → https://www.darkreading.com/cyberattacks-data-brea…

Relevance score: 91.0/100

# More from September 15

  1. 1
    Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation SecurityWeek
  2. 3
    CISA: Hackers now exploit max severity GitLab flaw in attacks BleepingComputer
  3. 4
    'Sandworm' Chains Cisco Vulnerabilities to Deploy Cyclops Blink Dark Reading
  4. 5
    Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries The Hacker News
  5. 6
    Three JFrog Artifactory Flaws Exploited for Backdoor Deployment SecurityWeek
  6. 7
    ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks SecurityWeek
  7. 8
    Revolut discloses data breach exposing financial info, passports BleepingComputer
  8. 9
    New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing The Hacker News
  9. 10
    Microsoft’s Patching Schneier on Security