60
K2 partners with GuardSight to secure web apps and container workloads against sophisticated attacks
60
60
60
45
60
60
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal in GitLab CE/EE, is actively exploited and was added to CISA's KEV catalog.
GitLab patched CVE-2026-85706, a critical path traversal (CWE-22) in the repository commits API scoring CVSSv3.1 10.0, allowing unauthenticated arbitrary file reads on affected self-managed servers under certain conditions. CISA added it to the KEV catalog on September 11, 2026, citing active exploitation, with a September 14 remediation deadline and BOD 26-04 forensic triage requirements. Fixed versions are 19.1.8, 19.2.6, and 19.3.2; the release also fixes 17 other vulnerabilities including CVE-2026-87719, a CVSS 9.9 insecure deserialization flaw in GitLab EE.
88
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
50
45
60
60
Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers
60
60
60
45
60
60
60
60
60
45
60