GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
[POC] CVE-2026-85706 — cve-2026-85706
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
[POC] CVE-2026-85706 — CVE-2026-85706
GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC
[POC] CVE-2026-85706 — gitlab-cve-2026-85706-ioc
CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE path traversal vulnerability with IOC scanning, Sigma, Suricata/Snort, and SIEM detection rules.
[POC] CVE-2026-85706 — GitLabSniper
CVE-2026-85706 Unauthenticated File Read
PoC: CVE-2026-85706
GitLab Unauthenticated Arbitrary File Read
[POC] CVE-2026-85706 — gitread
CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting
[POC] CVE-2026-85706 — CVE-2026-85706-gitlab-poc
CVE-2026-85706
[POC] CVE-2026-85706 — cve-2026-85706-poc-exploit-gitlab
cve-2026-85706-poc-exploit-gitlab
[POC] CVE-2026-85706 — CVE-2026-85706-PoC
PoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read
[POC] CVE-2026-85706 — CVE-2026-85706-PoC-Toolkit
🪬 CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3
[POC] CVE-2026-85706 — CVE-2026-85706_docker_exp
CVE-2026-85706_docker_exp
PoC: CVE-2026-85706
CVE-2026-85706
PoC: cve-2026-85706
CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.
PoC: CVE-2026-85706
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read exploit PoC.
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free