Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
CVSS Skor
10.0
EPSS İhtimal
%93.0
Risk Skoru
18.6
Yayın
1 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE-2026-85706 – GitLab Unauth File Read Toolkit (CVSS 10.0) | Red/Blue Team suite for self-managed GitLab CE/EE 18.7–19.3.1. 2 tools: Full Exploit (unauth file read, admin token, mass scan, loot, shell, stealth, SQLite/HTML/JSON output) etc., SafeChecker (version detect, audit, security headers, TLS check, MITRE). Only Use Ethically, Educ. <3
CVE-2026-85706 — GitLab unauthenticated arbitrary file read (CVSS 10.0). Root-cause analysis, vulnerable Docker lab, and PoC.
CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read exploit PoC.
CVE-2026-85706 · GitLab CE/EE unauthenticated file read · research PoC with oracle mode, fd enumeration, and tiered loot targeting
POC GitLab CE/EE unauthenticated arbitrary file read vulnerability (CVE-2026-85706).
CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit. Detect and hunt for exploitation of the critical unauthenticated GitLab CE/EE path traversal vulnerability with IOC scanning, Sigma, Suricata/Snort, and SIEM detection rules.
cve-2026-85706-poc-exploit-gitlab
Nuclei: GitLab CE/EE <=19.1.7/19.2.5/19.3.1 - Arbitrary File Read
GitLab CE/EE unauthenticated path traversal (CVE-2026-85706) - PoC
Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1
İlgili Benzer Açıklar
Vulnerability in GitLab
Weak Password Recovery Mechanism for Forgotten Password in GitLab
Server-side request forgery in GitLab
Improper Control of Generation of Code ('Code Injection') in GitLab
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
Missing Authorization in GitLab
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85706"