Security Vulnerabilities
CVE-2026-85706
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API.
Known exploited
CVSS Score
10.0
EPSS Score
0.111
Published
2026-09-12
strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption.
CVSS Score
5.9
EPSS Score
0.004
Published
2026-09-11
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-09-11
strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser.
CVSS Score
3.7
EPSS Score
0.002
Published
2026-09-11
strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax.
CVSS Score
7.5
EPSS Score
0.003
Published
2026-09-11
strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity.
CVSS Score
7.1
EPSS Score
0.003
Published
2026-09-11
strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.
CVSS Score
5.9
EPSS Score
0.004
Published
2026-09-11
strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime.
CVSS Score
3.7
EPSS Score
0.002
Published
2026-09-11
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVSS Score
8.8
EPSS Score
0.005
Published
2026-09-10
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenticated user to send a specially crafted request to write arbitrary files on the system.
CVSS Score
4.3
EPSS Score
0.002
Published
2026-09-10
Page 1