# CISA: Hackers now exploit max severity GitLab flaw in attacks

> **Newsylist Open Intelligence Dossier** · First detected: 2026-09-14 15:29 UTC · Category: Technology · Sources: 6 · Current Velocity: 3.67

## Key People, Organizations & Locations
Hackers, CISA, GitLab

## Multi-Source Evidence Table
| Source Outlet | Headline | Published (UTC) | Verification URL |
|---|---|---|---|
| csoonline.com | A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMi1gFBVV95cUxQSENvZlg2SmNaa19xTTJWRUgwdHpsSXZMZ05saXlUVVVSZVlxRGwtUmtlZHVPQkdYdnh5Y0NhLTdxeU80OGU5aUVrdzctMjJ5N2k1ZU5ZVGt1RllKcEhGZ0lKOTBleGRzaXc5VXVpTkZCdW03bWdlbDhVY2haUmNtWV9KS2VDZFVKUTMxZ0RkUTNzd3JxOW9qZi15WjdUMndlT0RseWNFdWxFdkdrMGF2U01UaEQ5TU5kMENKQ0tmUUoxTWNKYWdoZG0wS0RRQ0JKblFQTmtB?oc=5) |
| Security Affairs | GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMi3gFBVV95cUxNX28xUDgtQTdhUGNvWVFjd2psYjhBU2dmaHJ4bzl3c3IwdUxvMm9QcGkzZlR5d09OeXZjWUU5N3VCRVRpUFFFWDV2SkJxeXI1NVV1S1lTNmhTVlhVQkVUSmRjcmJ5YWVUN1ZHdmdYb0JPZ3VqNkJrTjlVanQzQWc3MllDaE1uaTlzWkxPeE96UHM4Z0NNQzV6a3JTbHcyNHpSQ1dYN1NUeUVYb3JsNjZUejJuYTZLczdBVGVDUngyQnhPNm5fZzIwNmlTX0NlTE5SdlN0bU9KZWRPRGFkVnfSAeMBQVVfeXFMT1F4anI2dTJUU0RMU0U1blFCXzJDWnc1MU94VG92VnNxNUhEaHJvb0RHc2QyY3hFUGNPNzBuNGRQQmdpMHhfRkJYUTFOTmZ3aHN1M3NHM0NSb1dmYjR3am01aURlQTRIU3JIcGR2M1U2UFZPR1M) |
| Dark Reading | Maximum Severity GitLab Flaw Puts Supply Chains at Risk | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxNeldmQUZwemJkOTVHM2FGSER3T2FUNkpqMm9tMXZZZHVaVjZscjZLazBlSUZpbGRJdzdJU2Ywby1mX2xaUDNaZDN5b3RaOXNIOGYtc3V1cldtT0U5eVFzV1k1NmE2QTFqM2tNdWw2RTZTUUI4X3lLanNJZ2NScGdpWmpoOGxrQko0NmxER2FIQUVTOUR0UzB5VmNvSnlRZHNJN0FQbg?oc=5) |
| The Register | Perfect-10 GitLab bug under attack days after patch lands | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMiswFBVV95cUxPM2pGWFByUnBYTWlqeUVzbWNma0lQZ2pqekxfWF9xbWNYMDVrRkVEVGFiMzRKTjBobjJEcEJNVUJZa2pvZy10bl9RSkxtb0ZYbWZSVE1oVTNXSENQSnFIbE1oRGg3YVpUdlNyQWhLOUt0M1oyUWMtcnE1VEdTUGpiYTktUkhQRXBVSXA3cWM2UWJESVh4Y0F3RzA0T3F4WGd3dWJ0S1NVd1pJUUVwZml5VTR3dw?oc=5) |
| yahoo.com | Malicious actors already using critical GitLab flaw, CISA and others warn | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMinwFBVV95cUxOc2lyYnJrd1g1ajRvY25xVGtIeURBNUlia2QxRGhTbmFsT2paN2tMRFVsa3hzVkxtbjY5MVZPMmlMU2lDM2Y5aFlFdFI4OWt2OGNYV2tpenFhMV9FTU5uZ0VsVEJteU1WcVM1WkRjQ0o0SlBpOERGZVA0cWFUU3VzcXhXbmRKbGRjMXNWWno3N0k1bTZxUjBmeG1ERlV6OEU?oc=5) |
| BleepingComputer | CISA: Hackers now exploit max severity GitLab flaw in attacks | 2026-09-14 07:06 | [Source Link](https://news.google.com/rss/articles/CBMirAFBVV95cUxObkM5aUV1VFpCVFBOMjA2cVp1bTV6d0NOaVJMY0V2dzJUSTIwNDNCUmEtUERlX00xMmE4QkdhQ1pjbEVTYUNoTUFkdDliYlJSd212VXFhVkZqNWJsWVB6eDdmc2p5NXJoZWlmRXdqTDBudVhlRU5nNk9kS1NJV0h2UHNmdkVBbnlGa0tzclZHQTJUU0VnVnZpYWE1T0xFNi01ZzFYZExxX012WW0w0gGyAUFVX3lxTE9Tcnk2dkRHUG9VYWdzVHFjYktxREpPRnlCOVB3NndZNk1SS0ljZFU1S0lOTkVGcFdRRjNWVnN2V2F1TFlQV1VPWFpDRTJib1NCWkVuSms0REJhc3BtbG5JVzZYYXpKMDJmVXVJY2ZHYWlfQkdYdmdVUkpoOEZKcWs4NlB3SUtPY09hSWRlbjlRMzVRYVY3eEdZaFlyT19LUGtDdU1FUzQ) |

---
*Canonical Source: https://www.newsylist.com/trend/2026-09-14/cisa-hackers-now-exploit-max-severity-gitlab-flaw-in-attacks*
*Synthesized by Newsylist Open Intelligence Engine under E-E-A-T journalistic standards.*