Maximum Severity GitLab Flaw Puts Supply Chains at Risk

CVE-2026-85706 is a path traversal vulnerability with a 10 out of 10 CVSS score, affecting both GitLab Community Edition and Enterprise Edition instances.

Read at the source

Summary written for cymesh.dev. The full article lives at Dark Reading.

Referenced CVEs

CVE-2026-85706

Topics

supply-chain cve

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/maximum-severity-gitlab-flaw-puts-supply-chains-at-risk-13jept

2026-09-15 05:18 UTC[crit]

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

SecurityWeekCVE-2026-76461zero-day rce cve

2026-09-14 13:42 UTC[info]

Bitsight connects threat intelligence and exposure monitoring across the supply chain

Help Net Securitysupply-chain data-breach

2026-09-14 12:00 UTC[med]

CISA Adds One Known Exploited Vulnerability to Catalog

CISA AdvisoriesCVE-2026-76461cve cisa

2026-09-14 00:00 UTC[crit]

Cisco Secure Email Gateway SQL Injection Vulnerability

CISACVE-2026-76461cve cisa

2026-09-13 14:26 UTC[high]

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

BleepingComputerCVE-2026-51990cve malware apt

2026-09-12 15:54 UTC[crit]

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The Hacker NewsCVE-2026-42016cve cisa iot