IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
CVEHighVerifiedSignal 76/100EPSS 1.1%

CVE-2026-85706

First Seen
Sep 11, 2026
Last Seen
Oct 9, 2026
Sep 11
First Seen
34d ago
Oct 9
Last Seen
5d ago
9
Reports
source reports
83%
Confidence
high
Found in 9 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
CVE
Known vulnerability being actively exploited in the wild.
MISP Category
vulnerability
EPSS Score
1.15%
EPSS Percentile
65.0th
Confidence
83%
Signal Score
76 / 100
IDS Rule
No
CVE Intelligence
Exploit Probability1.15%
65.0th percentile of all CVEs
Threat Context
Threat Actors2
PPlayAAPT29
Tags

Feed Intelligence Summary

9 reports83% confidence
TR
Truesec
Sep 29, 2026
CVE-2026-85706: Critical GitLab Unauthenticated Arbitrary File Read Vulnerability (CVSS 10.0)
1 IOC in report
RA
Rapid7
Sep 25, 2026
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
3 IOCs in report
CE
Censys
Sep 24, 2026
Introducing Censys CLI Skills: AI-Assisted Investigations at Scale
3 IOCs in report
HA
HawkEye
Sep 18, 2026
Weekly Threat Landscape Digest – Week 38
36 IOCs in report
SP
SOC Prime
Sep 14, 2026
CVE-2026-85706: Critical GitLab Path Traversal Flaw Exploited in the Wild
1 IOC in report
CP
Check Point Research
Sep 14, 2026
14th September – Threat Intelligence Report
7 IOCs in report
RA
Rapid7
Sep 14, 2026
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
2 IOCs in report
CP
Cyber Press
Sep 12, 2026
CISA Warns of Critical GitLab Path Traversal Flaw Exploited to Read Arbitrary Server Files
1 IOC in report
CP
Cyber Press
Sep 11, 2026
GitLab Patches Critical Flaws Enabling Arbitrary File Read, Credential Theft and Remote Code Execution
4 IOCs in report

Activity Timeline

9 total obs
Sep 29Sep 11

Threat Activity Heatmap

· Peak: 2026-09-14
Less
More
Mon
Wed
Fri
Oct
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
·
·
Jul
·
·
·
Aug
·
·
·
·
Sep
·
·
·
Oct
24h
0
Dormant
7d
0
Dormant
30d
4
Moderate
3mo
9
Elevated
Threat ScoreHigh Risk
76
SIGNAL
Signal Score
83%
Confidence
9
Reports
First seenSep 11, 2026
Last seenOct 9, 2026
Verified IOC

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 1 month ago · Last seen 5 days ago
Appeared in 9 threat reports from 9 sources
Associated with: Play, APT29
Used by malware: Play, Metasploit, META Stealer, Mythic