IT security 2026-09-12

Level Critical — 79/100 — 2026-09-12

Critical day: 5 stories ranked, 4 of the top 5 reported as actively exploited, 4 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability (69/100).

1. GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability — 69/100 (CVE-2026-85706)
2. ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability — 68/100 (CVE-2026-84869)
3. JFrog Artifactory Incorrect Authorization Vulnerability — 65/100 (CVE-2026-42016)
4. JFrog Artifactory Improper Authentication Vulnerability — 62/100 (CVE-2026-42018)
5. apache opennlp: The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGE… — 30/100 (CVE-2026-82617)