GitLab’s critical flaw is already drawing internet-wide probes

GitLab released emergency patches for two critical vulnerabilities—CVE-2026-85706 (unauthenticated path traversal allowing arbitrary file reads, CVSS 10.0) and CVE-2026-87719 (exposure of Advanced Search settings/passwords to certain logged-in users, CVSS 9.9). WatchTowr Labs reported internet-wide probes targeting the path traversal, and CISA added the issues to its Known Exploited Vulnerabilities list; self-hosted, internet-reachable GitLab instances should patch immediately.