CISA warns hackers are exploiting this max severity GitLab flaw

A 10/10 GitLab flaw was added to CISA's KEV, giving government agencies just three days to patch.

Perfect-10 GitLab bug under attack days after patch lands

CISA says attackers are exploiting a maximum-severity GitLab flaw that lets unauthenticated miscreants read arbitrary files ...
BankInfoSecurity

In-the-Wild Attacks Hit Popular DevSecOps Platform GitLab

Attackers are actively targeting a recently patched vulnerability in the popular DevSecOps platform GitLab that they can ...
InfoWorld

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s ...

CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity ...
SecurityWeek

GitLab Vulnerability Exploited One Day After Disclosure

Threat actors started exploiting CVE-2026-85706, a critical-severity path traversal in GitLab, one day after public ...