{"total":2,"items":[{"id":35,"title":"Kritieke kwetsbaarheid in GitLab wordt actief misbruikt: update nu","original_title":"Kritieke kwetsbaarheid in GitLab wordt actief misbruikt: update nu","source_rating":null,"summary":"Er is een kritieke kwetsbaarheid in GitLab Community Edition en Enterprise Edition gevonden met het kenmerk CVE-2026-85706. De kwetsbaarheid heeft een CVSS-score van 10.0 en wordt actief misbruikt. Het NCSC beoordeelt de kans op misbruik en de mogelijke schade als hoog en adviseert om zo snel mogelijk beveiligingsupdat","ai":false,"actions":[],"url":"https://www.ncsc.nl/alerts/kritieke-kwetsbaarheid-in-gitlab-wordt-actief-misbruikt-update-nu","type":"news","language":"nl","published_at":"2026-09-12T09:15:28+00:00","severity":"kritiek","priority":80,"vendors":["GitLab"],"cves":[{"id":"CVE-2026-85706","cvss":10.0,"epss":0.92956,"epss_percentile":0.9983,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.92956,"source_count":2,"ncsc":null,"source":{"slug":"ncsc-nl-nieuws","name":"NCSC-NL Nieuws & alerts","category":"overheid","country":"NL","license":"CC0 (Rijksoverheid)","reuse":"open"},"bundle":null},{"id":158,"title":"CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","original_title":"CVE-2026-85706: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","source_rating":null,"summary":"GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API.\n\nVereiste actie: Apply mitigations in accordance with vendor instr","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-85706","type":"kev","language":"en","published_at":"2026-09-11T00:00:00+00:00","severity":"kritiek","priority":75,"vendors":["GitLab"],"cves":[{"id":"CVE-2026-85706","cvss":10.0,"epss":0.92956,"epss_percentile":0.9983,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.92956,"source_count":2,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}