GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

By Sergio De Simone · InfoQ · Saturday, 3 October 2026 at 16:00 (1h ago) · Original article ↗

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab.

You're reading a preview. The full article is published by InfoQ on their website.

Read the full story on InfoQ

Security

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

Exploitation attempts came from China-hosted IP, VulnCheck researcher says

The Register 2h ago

Security

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

The U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service. In a "Security Service Espionage Alert" issued on September 30, 2026, MI5 said…

The Hacker News 2h ago

Security

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and…

The Hacker News 2h ago

GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

More Security & Privacy

Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows

MI5 Says China’s MSS Funded Research Involving 100+ U.K.-Linked Academics

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware