CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
84
Vendor
GitLab
- Mentions · 7d15
- Mentions · 30d56
- All mentions92
- First seenAug 16, 2026
- Last mentioned10h ago
Timeline
92 articles · newest firstAttackers exploit max-severity GitLab flaw CVE-2026-97229
The integer overflow allows unauthenticated code execution through a crafted CI/CD regular expression; fixes are 19.4.2, 19.3.5, and 19.2.8.
84
CISA confirms active exploitation of GitLab CVE-2026-97229
Unauthenticated attackers can run code via a crafted CI/CD regex; federal remediation is due November 1.
88
Max-severity GitLab flaw exploited against Alpine Linux
CVE-2026-97229 allows unauthenticated code execution; Alpine rebuilt its instance, and CISA gave agencies three days to patch.
82
CISA says GitLab integer overflow CVE-2026-97229 is exploited
Fixes cover GitLab 19.2.8, 19.3.4, and 19.4.2; federal agencies face a November 1 deadline.
84
CISA adds exploited GitLab RCE and Cisco firewall DoS to KEV
Federal civilian agencies are told to apply fixes for both flaws by November 1, 2026.
82
CISA adds exploited GitLab integer overflow CVE-2026-97229 to KEV
FCEB agencies must prioritize the GitLab flaw on exposed assets and check for compromise before patching.
78
CISA adds exploited Ivanti Connect Secure and GitLab flaws to KEV
CVE-2026-111357 is missing authentication in Ivanti Connect Secure; CVE-2026-97229 is an integer overflow in GitLab CE and EE.
82
Attacker probed Alpine GitLab via CVSS 10 flaw (CVE-2026-97229)
Alpine rebuilt gitlab.alpinelinux.org and reset passwords after probes; GitLab upgrades alone miss installs on stock Ruby.
82
CISA KEV lists GitLab unauthenticated RCE CVE-2026-97229
A crafted regular expression in CI/CD configuration can run arbitrary code; the federal due date is November 1, 2026.
84
Alpine rebuilds GitLab after CVE-2026-97229 exploit attempts
Alpine found no proof of code execution or package tampering, but reset every password and replaced GitLab secret keys.
78
GitLab patches max-severity regex compiler RCE (CVE-2026-110264)
Unauthenticated users can run code via integer overflow when a crafted regular expression is compiled.
74
PHP2Shell attempts preceded same-week patches for PHP, GitLab and Node.js
GitLab’s unauthenticated RCE is CVSS 10.0 back to version 7.0; LiteLLM 1.107.0 stole credentials and OpenCode keys may have leaked.
84
Check Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
66
Weekly recap: PHP2Shell scans, Plex2Shell attacks, LiteLLM supply chain
CISA listed four exploited Plex flaws, while a leaked LiteLLM key led to a malicious Python package release.
78
Ruby fixes three regex bugs behind four critical GitLab RCE flaws
Apps that compile attacker-controlled patterns are affected; GitLab’s unauthenticated CVE-2026-110264 covers versions from 7.0 and is not in KEV.
74
AINews 'Black October' roundup clusters AI-linked security disclosures
The digest says many incidents were found earlier and disclosed together, while exploitation scale is disputed.
38
GitLab patches unauthenticated code execution bug CVE-2026-110264
The integer overflow hits GitLab CE/EE back to 7.0; fixes include 19.5.1 and backports through 18.11.13.
74
GitLab patches unauthenticated RCE in CE and EE (CVE-2026-110264)
The integer overflow reaches GitLab 7.0 from June 2014; no in-the-wild exploitation is indicated yet.
76
pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
68
GitLab CE and EE affected by vulnerabilities prior to 19.5.1
GitLab Critical Patch Releases 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 and 18.11.13 address issues in Community and Enterprise Editions.
40
GitLab patches max-severity regex compiler RCE (CVE-2026-110264)
An unauthenticated integer overflow can run arbitrary code; GitLab.com is already on the patched release.
78
Buyer’s guide compares 12 DevSecOps platforms for 2026
The roundup judges GitHub, GitLab, JFrog, Snyk, and others on scanning depth, workflow fit, and pricing.
18
GitLab patches unauthenticated regex RCE rated CVSS 10.0
CVE-2026-110264 reaches back to GitLab 7.0; self-managed admins must upgrade, and in-the-wild use is not confirmed.
82
GitLab fixes unauthenticated RCE in CE and EE (CVE-2026-110264)
The integer-overflow bug scores CVSS 10.0, is fixed in seven releases, and has no confirmed attacks or public exploit.
76
GitLab RCE flaw scores CVSS 10 (CVE-2026-110264)
Community and Enterprise builds from 7.0 before the listed 18.x and 19.x patches need urgent updates.
78
GitLab 19.5.1 patch covers a CVSS 10.0 integer overflow
The available text is only a Hacker News title, score, and a link to the 19.5.1 patch notes.
52
GitLab fixes unauthenticated RCE back to version 7.0 (CVE-2026-110264)
The CVSS 10.0 Onigmo overflow has no known attacks and no workaround; only self-managed installs must upgrade.
82
Check Point weekly brief: utility and app breaches, exploited zero-days
CenterPoint says more than 1 million Texans were exposed, while Burger King Japan cites about 11.18 million members.
64
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Rapid7 shows a reliable RCE proof of concept for GitLab's CVSS 10 regex flaw CVE-2026-97229.
68
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
A 2026 comparison ranks native and dedicated tools for securing CI/CD pipelines.
20
PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)
A public PoC shows critical GitLab CVE-2026-97229 can run commands after a project push.
78
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
GitLab Patches Max-Severity Vulnerability CVE-2026-97229
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated remote code execution flaw in CI/CD handling.
78
GitLab security advisory (AV26-1028)
Canada's Cyber Centre urges updates for critical GitLab patches before versions 19.2.8, 19.3.5, and 19.4.2.
58
GitLab patches a max-severity regex flaw alongside five high-severity bugs
GitLab patched unauthenticated CI/CD regex RCE CVE-2026-97229 (CVSS 10) and five high-severity flaws.
78
CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
Rapid7 reproduced unauthenticated GitLab RCE CVE-2026-97229 (CVSS 10) and urges immediate patching.
84
CVE-2026-97229: Critical GitLab RCE
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated RCE in self-managed servers.
78
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code
GitLab patched CVE-2026-97229, a CVSS 10.0 bug letting unauthenticated users run code on CE and EE servers.
82
Related CVEs
by mentions- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-1102641%10.0Unauthenticated RCE in GitLab CE/EE via regex integer overflow
- CVE-2026-9097017%9.9Prompt sandbox escape to RCE in GitLab AI Gateway
- CVE-2026-194786%9.1Unauthenticated GraphQL Code Injection in GitLab CE/EE Enables Data Tampering
- Authenticated GraphQL Subscription Flaw Leaks Search Credentials in GitLab EE
- Stored XSS in GitLab CE/EE via syntax highlighting
- Improper Authorization in GitLab CE/EE Pipeline Creation
- LDAP account takeover in GitLab when SAML and LDAP auto-link are on
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
Appears with
- GitLab Community Editionproduct · 28
- GitLab Enterprise Editionproduct · 28
- GitLaborganization · 28
- CISAorganization · 24
- GitLabproduct · 23
- HackerOneorganization · 12
- GitLab EEproduct · 12
- GitLab CEproduct · 12
- Microsoftvendor · 9
- GitLab AI Gatewayproduct · 8
- GitHubvendor · 7
- GitLab Duoproduct · 7
- watchTowrorganization · 5
- Palo Alto Networksvendor · 5
- Alpine Linuxvictim · 5
- Duo Agent Platformproduct · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.