Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

GitLab CE/EE security update for CVE-2026-85706

Security Patch Release
First reported
Last updated
Happening score
H score 44
2 unique sources, 2 articles

Summary

Hide ▲

GitLab released CE/EE fixes for CVE-2026-85706, and users were urged to patch immediately to close a repository commits API flaw that can expose credentials and secrets. The update covers GitLab Community Edition (CE) and Enterprise Edition (EE), including 19.3.2, 19.2.6, and 19.1. The patch release matters because vulnerable servers can leak sensitive information through unauthenticated requests.

Related Happenings

Arista security patch release for CVE-2026-93952

Security Patch Release
H score53 First: 22.09.2026 15:29 Last: 22.09.2026 15:29 Sources 1

About this happening: Arista released fixed VeloCloud Orchestrator (VCO) builds for the 5.2 and 6.4 trains, reducing exposure for deployments tied to CVE-2026-93952. The patch set cover...

Open Happening

CISA KEV listing and BOD 26-04 remediation deadline for GitLab CVE-2026-85706

Public Sector Action
H score36 First: 14.09.2026 10:06 Last: 14.09.2026 10:06 Sources 1

How related: On the same day, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-85706 to its Known Exploited Vulnerabilities (KEV) Catalog.

About this happening: CISA added CVE-2026-85706 to its actively exploited catalog and gave federal agencies three days to secure affected systems under BOD 26-04. The move turns the...

Open Happening

GitLab CE/EE security patch release (CVE-2023-2825, CVE-2026-87719)

Security Patch Release
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab released fixes for CVE-2023-2825 and CVE-2026-87719 in GitLab Community Edition (CE) and Enterprise Edition (EE), requiring self-managed installations...

Open Happening

GitLab self-managed installations immediate upgrade advisory

Advisory/Mitigation
H score45 First: 11.09.2026 14:15 Last: 11.09.2026 14:15 Sources 1

About this happening: GitLab issued immediate upgrade guidance for self-managed GitLab installations after fixing two security issues in GitLab CE and GitLab EE. Operators were told...

Open Happening

HPE ArubaOS-CX security bulletin (CVE-2026-73749)

Security Patch Release
H score31 First: 03.09.2026 21:28 Last: 03.09.2026 21:28 Sources 1

About this happening: HPE released a security bulletin for ArubaOS-CX that patches CVE-2026-73749, a buffer overflow that could let unauthenticated remote attackers reach remote code...

Open Happening

Timeline

  1. 14.09.2026 10:06 3 articles · 13d ago

    GitLab releases CE/EE fixes for CVE-2026-85706

    Mitigation Patch Update

    GitLab released fixes for CVE-2026-85706 in GitLab Community Edition (CE) and Enterprise Edition (EE) versions 19.3.2, 19.2.6, and 19.1, and urged administrators to patch immediately to close a repository commits API flaw that can expose credentials, secrets, and other sensitive data.

    Show sources
    Open in new tab
  2. 14.09.2026 10:06 1 articles · 13d ago

    watchTowr observes in-the-wild probes for CVE-2026-85706

    Detection Ioc Update

    watchTowr observed in-the-wild probes for CVE-2026-85706 against Internet-facing GitLab servers that had not been patched, indicating active scanning for a path traversal issue that can let attackers read arbitrary files through the repository commits API.

    Show sources
    Open in new tab
  3. 14.09.2026 10:06 1 articles · 13d ago

    CISA adds CVE-2026-85706 to its actively exploited catalog

    Legal Policy Action Update

    CISA added CVE-2026-85706 to its catalog of actively exploited vulnerabilities and gave federal agencies three days under Binding Operational Directive (BOD) 26-04 to secure affected systems, while urging all organizations to remediate the GitLab flaw quickly.

    Show sources
    Open in new tab