GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

Sergio De Simone — Sat, 03 Oct 2026 16:00:00 GMT

CVE-2026-85706 is a critical GitLab path-traversal vulnerability that has moved beyond theoretical risk into confirmed exploitation. It affects self-managed GitLab CE/EE and could allow an unauthenticated remote attacker to read arbitrary files from the GitLab.

By Sergio De Simone

Artifactory Vulnerabilities under Active Exploitation Enable Authentication Bypass and Admin Access

Sergio De Simone — Mon, 28 Sep 2026 19:00:00 GMT

Three Artifactory vulnerabilities under active exploitation enable authentication bypassing on Internet-accessible, self-hosted deployments, potentially allowing attackers to establish persistent administrator access in under five minutes. The exploits then enable dangerous activity, including credential and key theft, arbitrary code execution, persistence, and anti-forensics measures.

By Sergio De Simone

InfoQ - Security Vulnerabilities

GitLab Vulnerability Under Active Exploitation Enables Unauthenticated Data Exfiltration

Artifactory Vulnerabilities under Active Exploitation Enable Authentication Bypass and Admin Access