CISA has added a maximum-severity GitLab vulnerability, CVE-2026-85706, to its known exploited vulnerabilities catalog after security firm watchTowr detected attackers scanning the internet for unpatched servers. The flaw allows unauthenticated attackers to read credentials and sensitive files from GitLab instances via a single crafted HTTP request to the repository commits API. GitLab patched the issue in versions 19.3.2, 19.2.6, and 19.1, but federal agencies now have just three days to remediate under a binding directive.
bleepingcomputer.com
· 2026-09-14
A critical authentication bypass, CVE-2026-82329, in self-managed JFrog Artifactory deployments is being actively exploited to mint fraudulent administrator tokens without any prior authentication. The flaw sits in Artifactory's default configuration, and watchTowr researchers say attackers are already using it in the wild. JFrog patched the issue on August 28 across several version branches, and confirmed its cloud-hosted environments were never at risk.
bleepingcomputer.com
· 2026-09-02
CISA has added CVE-2026-8452, a memory overflow bug in Citrix NetScaler ADC and Gateway appliances, to its Known Exploited Vulnerabilities catalog, requiring federal civilian agencies to patch by August 29. Originally described by Citrix as only enabling denial-of-service, researchers at watchTowr later demonstrated it can be exploited for root-level remote code execution, and reports indicate attackers are already deploying web shells on unpatched systems.
bleepingcomputer.com
· 2026-08-27
GoKawiil