CVE-2026-85706

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 11, 2026

Last Seen

October 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure81.0

On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization....

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches81.0

A critical CVE-2026-85706 path-traversal vulnerability in GitLab (CVSS 10.0) was exploited in the wild just hours after its disclosure on September 12, 2026. Microsoft released its largest-ever patch batch, addressing 974 vulnerabilities, including several actively exploited Windows flaws. The GitLa...

GitLab Issues Emergency Patch for Critical RCE Vulnerability80.3

GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code...

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment78.0

A critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows has been exploited by the China-linked UNC3569 threat group to deploy the GrayRabbit backdoor. The flaw allows for one-click remote code execution via crafted links, affecting hundreds of millions of users. The att...