← Incidents
INCIDENT 516Exploited vulnerabilityHIGH CONFIDENCESourced
CVE-2026-85706 added to CISA KEV: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability
<p>CISA has added one new vulnerability to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-85706" target="_blank">CVE-2026-85706</a> GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability</li> </ul> <p>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.</p> <p><a href="https://www.cisa.gov/news-events/direc…
Last evidence update
12 SEP 2026 · 03:16 UTC
Source count
3
Status
high confidence
GovernmentCVE-2026-85706
Observation history
How this record has evolved as evidence accumulated.
12 SEP · 05:22 UTC
Second independent source
12 SEP · 05:22 UTC
Initial report
12 SEP · 05:22 UTC
Summary updated from new evidence
13 SEP · 05:22 UTC
Second independent source
13 SEP · 05:22 UTC
Confidence upgraded
13 SEP · 05:22 UTC
Status changed
Evidence