SecurityBleepingComputerabout 2 hours ago
CISA Warns of Active Exploitation of GitLab Flaw
1 min read
CISA has added a maximum-severity GitLab vulnerability (CVE-2026-85706) to its catalog of actively exploited flaws. The flaw, stemming from missing authentication in the repository commits API, allows unauthenticated attackers to read sensitive data. GitLab patched the issue in versions 19.3.2, 19.2.6, and 19.1, urging immediate updates. Federal agencies have three days to comply.
Level
Hype check
Tap to vote and see what everyone thinks.
