/
attack_type:path_traversal × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · critical

CISA adds GitLab CE/EE path traversal flaw CVE-2026-85706 to KEV catalog on evidence of active exploitation

CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-11 based on evidence of active exploitation: CVE-2026-85706, a path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors…

gbhackers.com · · 2 fontes · 2 atualizações critical

Horizon3.ai publishes public PoC for FortiSIEM unauthenticated RCE CVE-2026-106173 via phQueryMaster gRPC file overwrite

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical flaw in Fortinet FortiSIEM that lets unauthenticated attackers turn an arbitrary file write into remote code execution. Researcher Zach Hanley published the technical analysis on October 20, following Fortinet's advisory FG-IR-26-180 of October 13. …