GitLab security advisory (AV26-917)

T1Critical 85Covered by 1 source · first reported by Canadian Centre for Cyber Security at 11 Sept, 20:35 UTC

Serial Number: AV26-917 Date: September 11, 2026 As of September 10, 2026, GitLab is affected by vulnerabilities in the following product: GitLab Prior to 19.1.8 Prior to 19.2.6 Prior to 19.3.2 On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-85706 to…

security

Sources

T1GitLab security advisory (AV26-917)Canadian Centre for Cyber Security11 Sept, 20:35

Vulnerabilities

CVE-2026-85706

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 3 days to remediate	15
public poc — 12 repositories	20