Sploitus

Exploit for gitlab-cve-2026-85706-ioc

CVE-2026-85706

kitploit · 2026-09-12

Exploit Code

MARKDOWN8 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JITHINKRISHNANRS-GITLAB-CVE-2026-85706-IOC
# CVE-2026-85706 — GitLab Path Traversal IOC Scanner & Detection Toolkit

**GitLab CE/EE Repository Commits API Unauthenticated Path Traversal (CVSS 3.1: 10.0, Critical)** **Status: Actively exploited in the wild · Listed in CISA KEV (2026-09-11, due 2026-09-14) · Patched by GitLab 2026-09-10**

![CI](https://github.com/jithinkrishnanrs/gitlab-cve-2026-85706-ioc/actions/workflows/ci.yml/badge.svg) ![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg) ![CVSS](https://img.shields.io/badge/CVSS-10.0%20Critical-red) ![CISA KEV](https://img.shields.io/badge/CISA%20KEV-Listed-critical) ![GitHub issues](https://img.shields.io/github/issues/jithinkrishnanrs/gitlab-cve-2026-85706-ioc) ![GitHub stars](https://img.shields.io/github/stars/jithinkrishnanrs/gitlab-cve-2026-85706-ioc)

A free, open-source **incident response and threat hunting toolkit** for  — a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE) affecting the . This repository gives security teams, SOC analysts, detection engineers, and GitLab administrators a ready-to-run , , , and a  — everything you need to detect exploitation attempts, confirm patch status, and respond to this GitLab zero-day / n-day vulnerability quickly.