[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2GXc6EfzF23rUdxJ9JYdwr40ZX9JHBVjV5eayh6JByc":3},{"article":4,"iocs":46,"watch_terms":54,"solutions":55,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"35a5b446-7680-416e-aa27-4247fdbd6eb1","GitLab’s critical flaw is already drawing internet-wide probes","gitlab-s-critical-flaw-is-already-drawing-internet-wide-probes-9a11fa","One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately. The post GitLab’s critical flaw is already drawing internet-wide probes appeared first on CyberScoop.","GitLab has issued emergency patches for two severe vulnerabilities, including a critical flaw (CVE-2026-85706) with a CVSS score of 10.0 that allows unauthenticated attackers to read server files. A second flaw (CVE-2026-87719) with a CVSS score of 9.9 affects Enterprise Edition users and could expose settings and passwords. Security firm WatchTowr Labs reports that attackers are already probing for the path traversal flaw, and warns that widespread exploitation is likely imminent.","GitLab releases patches for two critical flaws, with one already being exploited in the wild.","https:\u002F\u002Fcyberscoop.com\u002Fgitlab-critical-flaws-path-traversal-scans\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2026\u002F09\u002FGettyImages-2188260379-1.jpg","2026-09-11T18:41:52+00:00","2026-09-11T20:00:30.137355+00:00",9,[17,20,22,25],{"name":18,"type":19},"GitLab Community Edition","product",{"name":21,"type":19},"GitLab Enterprise Edition",{"name":23,"type":24},"GitLab","vendor",{"name":26,"type":27},"WatchTowr Labs","threat_actor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,39,41],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":40},{"id":28,"icon":30,"name":31,"slug":32},{"category":42},{"id":43,"icon":30,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47,51],{"type":48,"value":49,"context":50},"cve","CVE-2026-85706","Critical path traversal vulnerability allowing unauthenticated file read.",{"type":48,"value":52,"context":53},"CVE-2026-87719","Vulnerability allowing logged-in users with Duo Chat access to expose settings and passwords.",[23,18,21],{"controls":56,"vendors":133},[57,86,108],{"slug":58,"name":59,"problem":60,"products":61},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[62,70,78],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":87,"name":88,"problem":89,"products":90},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[91,92,100],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xpanse","Cortex Xpanse","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xpanse","External attack surface discovery and remediation.",{"slug":109,"name":110,"problem":111,"products":112},"patch-management","Automated patch management","Known holes get closed in days, not months.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":109,"product_name":130,"url":131,"description":132},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",[134],{"slug":135,"name":136,"logo_path":137,"roles":138},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png",[139],"reported_by",{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":155},"critical-gitlab-flaw-under-active-probing-patch-immediately","Critical GitLab Flaw Under Active Probing — Patch Immediately","GitLab disclosed two severe vulnerabilities — including a perfect CVSS 10.0 path traversal flaw — that allow unauthenticated attackers to read arbitrary server files, potentially exposing credentials and sensitive configuration data. The fact that internet-wide probing began almost immediately after disclosure underscores how quickly threat actors monitor public CVE feeds and weaponize new vulnerabilities. For organizations running GitLab, especially self-managed Enterprise Edition instances, delays in patching can mean complete compromise of source code, secrets, and CI\u002FCD pipelines. This incident highlights that critical infrastructure tools like source code management platforms require the same — if not greater — patching urgency as perimeter-facing systems.",[145,146,147,148,149,150,151,152,153,154],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-7: Boundary Protection","NIST IR-6: Incident Reporting","ITIL: Change and Release Management (Emergency Change)","GDPR Article 32: Security of Processing (obligation to apply timely patches protecting personal data)",{}]