CVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE).

The post CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API appeared first on OffSec.

CVE-2026-72898 is a critical unauthenticated SQL injection in Metabase's password-reset functionality. Learn more about it.

The post CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability appeared first on OffSec.