GitLab's CVSS-10 File Read Needs No Login — and the Scanners Are Already Knocking (CVE-2026-85706)
An unauthenticated path traversal in GitLab's repository commits API reads arbitrary files off self-managed CE/EE. Fixed Sept 10 in 19.3.2 / 19.2.6 / 19.1.8, on KEV with a federal due date of Sept 14 — and watchTowr's honeypots are already seeing behavioral probes.
Critical severity, 4 of 4. Act now — exploited, or trivially exploitable on an exposed service.CVSS 10.0Exploited in the wildKEV due 14 SEP 2026CVE-2026-85706 +2
gitlabkevpath-traversal