HackerOne

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenAug 31, 2026
Last mentionedSep 12, 2026

Timeline

3 articles · newest first

CISA Warns of GitLab Path Traversal Vulnerability Exploited in Attacks

CISA added actively exploited GitLab path traversal flaw CVE-2026-85706 (CVSS 10.0) to its KEV catalog, setting a September 14 federal patch deadline.

Cyber Security NewsSep 12, 04:32 UTC · Sep 12, 2026Exploit / PoCExploitedCVE-2026-857064 · 2 reads

GitLab urges users to patch max severity path traversal flaw

GitLab urges self-managed users to immediately patch a maximum-severity path traversal flaw (CVE-2023-2825) enabling unauthenticated arbitrary file reads.

BleepingComputerSep 11, 11:15 UTC · Sep 11, 2026VulnerabilityCVE-2023-2825 CVE-2026-87719 CVE-2021-22175+12 · 1 read

AI AppSec tools agree on just 5% of security findings

Contrast Security report finds 42 confirmed exploit attempts per application monthly and three AI scanners agreeing on only 5% of findings.

Help Net SecurityAug 31, 00:00 UTC · Aug 31, 2026ResearchExploitedCVE-2006-1547 CVE-2023-381802

Related CVEs

by mentions

CVE-2026-8570697%10.0
Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
published Sep 12, 2026GitLab Community EditionKEVPoC ×13
CVE-2021-2217553%9.8
Unauthenticated SSRF in GitLab via Internal-Network Webhook Requests (CVE-2021-22175)
published Jun 11, 2021GitLab (self-managed Community and Enterprise editions)KEVPoC
CVE-2023-3818014%7.5
Unauthenticated DoS in Microsoft .NET, ASP.NET Core and Visual Studio 2022
published Aug 8, 2023microsoft .NET / .NET Core (including ASP.NET Core workloads)KEV
CVE-2021-3993536%7.5
Server-Side Request Forgery in GitLab Community and Enterprise Editions via CI Lint API
published Dec 13, 2021GitLab Community Edition (CE)KEV
CVE-2006-154755%—
Denial-of-Service in Apache Struts 1 ActionForm (pre-1.2.9)
published —Apache Struts 1KEV
CVE-2026-877199.9
Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
published Sep 12, 2026GitLab EE
CVE-2023-282572%7.5
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0
published May 26, 2023gitlab gitlab

Appears with

CISAorganization · 3
HackerOneorganization · 2
CISAvendor · 2
GitLabvendor · 2
GitLab CEproduct · 1
GitLaborganization · 1
Spring4Shellproduct · 1
Log4Shellproduct · 1
Contrast Securityvendor · 1
GitLab EEproduct · 1
GitLab Enterprise Editionproduct · 1
Zero Day Clockorganization · 1
GitLab Community Editionproduct · 1
FBIorganization · 1

Entities are extracted by the model from each article. First seen Aug 31, 2026, last mentioned Sep 12, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.