VDB
CVE-2026-85706
CVE-2026-85706
PUBLISHED
KEV
As of September 10, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.1.8 Prior to 19.2.6 Prior to 19.3.2 On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-85706 to their Known Exploited Vulnerabilities (KEV) Database. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
EPSS 1.15% · 65.0th percentile
Risk Scores
EPSS Score
1.15%
65.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Prior | Prior to 19.1.8 | |
| Prior | Prior to 19.3.2 | |
| Prior | Prior to 19.2.6 |
Timeline
- Sep 11, 2026 CISA KEV Added
- Sep 11, 2026 VulnCheck KEV Exploitation
- Sep 11, 2026 CVE Published
- Sep 12, 2026 EPSS Score
References
- https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-917 advisory
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released vendor
- https://docs.gitlab.com/releases/ vendor
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85706 advisory