New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside

Preview text: New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside 96…

Thursday, Sep 17, 2026 at 6:44 PM EasternKlaviyo

Abstract SecurityNew from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside

Fit to screenFull size

Using this email in an article? Credit: Abstract Security email via They Sent It, with a link to this page. Full-size image

Subject: New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside
Preview text: New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside 96…
From: marketing@em.abstract.security
Brand: Abstract Security
ESP: Klaviyo
Sent: Thu Sep 17, 2026, 6:44 PM ET
Size: 45 KB
Images: 5
Links: 7, 1 of them buttons
Subject length: 85 characters

Against Abstract Security's usual

Sent in the 6 PM hour, which holds 12% of its emails; 20% arrive in the 12 PM hour. The subject is 85 characters; its average is 51.

Email headers

What the brand's servers put on this email. Our receiving servers, the address we subscribed with and unsubscribe links are left out.

From: Abstract <[email protected]>
Reply-To: [email protected]
Subject: New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside
Date: Thu, 17 Sep 2026 18:44:40 -0400
Message-ID domain: 246044907m.em.abstract.security
Return-Path domain: 246044907m.em.abstract.security
DKIM signature: d=246044907m.em.abstract.security s=hs1; d=em.abstract.security s=hs2-246044907
List-Unsubscribe: Present, one-click
Feedback-ID sender: HubSpot

Other sending headers (names only): X-HS-Cid, X-Report-Abuse-To

	Oct 3, 2026 1:22 PM	New from ASTRO: NetScaler zero-days. Hunt before you patch
	Oct 1, 2026 8:09 PM	New from ASTRO: Your WAF has a side entrance 🫣
	Sep 21, 2026 3:52 AM	Protect Your Systems: GitLab Vulnerability CVE-2026-85706
	Sep 17, 2026 6:44 PM	New from ASTRO: CVE-2026-85706, GitLab arbitrary file read detection guidance inside (this email)
	Sep 3, 2026 1:54 PM	New from ASTRO: Zero-day drops against CrowdStrike Falcon during of Fal.Con
	Aug 26, 2026 9:58 AM	New from ASTRO: Closing RMM detection coverage gaps
	Jul 21, 2026 6:18 PM	New from ASTRO: An AI agent breached Hugging Face. Here's the detection playbook.