CVE-2026-85706
Known exploited · CISA KEV
CVSS 10 CRITICAL: gitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6…
CISA federal remediation date Sep 14 · date passed
Vulnerabilities & Exploits
CISA says attackers are exploiting GitLab CE/EE’s maximum-severity CVE-2026-85706, which GitLab patched earlier this month. Its addition to CISA’s active-exploitation reporting makes this a current exposure, not just a newly disclosed flaw.
The available reporting says the flaw can be exploited without authentication under certain conditions, but does not describe the exploit path or what successful exploitation enables. Active attacks are confirmed; whether they expose code, data, or anything else remains unknown.
For internet-reachable GitLab CE/EE instances still running affected versions, the available patch has not closed the exposure. CISA’s federal remediation deadline has also passed. The reporting does not establish whether successful attacks have led to compromise or how far an attacker could reach, so the blast radius remains unknown.
1 source · 6h ago
Known exploited · CISA KEV
CVSS 10 CRITICAL: gitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6…
CISA federal remediation date Sep 14 · date passed
BleepingComputer
CISA says max severity GitLab flaw now exploited in the wild
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
originalPart of the PlainSec briefing for 2026-10-30
Every edition of this story: CISA flags patched GitLab flaw as actively exploited