Vulnerability intelligence

CVE-2026-85706 is a path traversal vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE). This flaw resides within the repository commits API and stems from a combination of improper path confinement and a lack of authentication enforcement. Under specific conditions, an unauthenticated attacker can exploit this vulnerability to read arbitrary files from the affected GitLab server. Successful exploitation of CVE-2026-85706 can lead to the exposure of various sensitive data accessible to the GitLab server process, including configuration details, credentials, secrets, tokens, SSH keys, and database credentials. The vulnerability requires no authentication or user interaction and can be exploited remotely. GitLab released patches for this issue on September 10, 2026, in versions 19.1.8, 19.2.6, and 19.3.2, addressing all affected versions from 18.7 onwards.

CVE-2014-6271, widely known as "Shellshock," is a significant vulnerability discovered in the GNU Bash shell, which is the default command-line interpreter for most Linux distributions and macOS systems. This flaw allows for remote code execution (RCE), enabling attackers to execute arbitrary commands on a vulnerable system. The core of the vulnerability lies in how Bash processes specially crafted environment variables. Specifically, vulnerable versions of Bash fail to stop parsing after a function definition within an environment variable. As a result, any commands placed immediately after the function definition are also executed. Attackers can exploit this by injecting malicious commands into environment variables that Bash subsequently processes, such as through CGI headers in web servers, SSH services, or DHCP clients, thereby gaining the ability to run arbitrary code with the privileges of the running service.

CVE-2017-5638 is a remote code execution (RCE) vulnerability found in Apache Struts 2, specifically within its Jakarta Multipart parser. This flaw arises from incorrect exception handling and error message generation during file upload attempts. Attackers can exploit this by crafting a malicious `Content-Type` HTTP header. The vulnerability occurs because the `Content-Type` value is not properly escaped after an error, and the `LocalizedTextUtil.findText` function, which constructs error messages, interprets content within `${...}` as an Object Graph Navigation Library (OGNL) expression. This allows for the evaluation of arbitrary OGNL expressions, leading to the execution of commands on the server. Affected versions include Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1.

CVE-2026-85706 is a path traversal vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE). This flaw resides within the repository commits API and stems from a combination of improper path confinement and a lack of authentication enforcement. Under specific conditions, an unauthenticated attacker can exploit this vulnerability to read arbitrary files from the affected GitLab server. Successful exploitation of CVE-2026-85706 can lead to the exposure of various sensitive data accessible to the GitLab server process, including configuration details, credentials, secrets, tokens, SSH keys, and database credentials. The vulnerability requires no authentication or user interaction and can be exploited remotely. GitLab released patches for this issue on September 10, 2026, in versions 19.1.8, 19.2.6, and 19.3.2, addressing all affected versions from 18.7 onwards.

CVE-2026-84869 describes a vulnerability found within the ScreenConnect client. This flaw permits the unauthorized transfer and execution of files during an active remote session, bypassing typical authorization or host confirmation processes. It is important to note that this condition specifically affects the ScreenConnect client and does not impact ScreenConnect servers. The vulnerability is associated with improper privilege management and missing authorization.

CVE-2026-42018 is an improper authentication vulnerability affecting JFrog Artifactory. This flaw allows an unauthenticated caller to obtain an internal anonymous-user token, even when anonymous access is explicitly disabled within the system. The presence of this token could potentially lead to the exposure of sensitive resources within the Artifactory instance. This vulnerability has been observed in active exploitation, often chained with CVE-2026-42016. When combined, these vulnerabilities can enable attackers to escalate privileges and gain administrative control over self-hosted Artifactory servers.