CISA adds exploited GitLab and Cisco firewall flaws to KEV
Federal agencies must fix unauthenticated GitLab code execution and a Cisco firewall reload bug by November 1, 2026.
84
Victim
Alpine Linux
- Mentions · 7d5
- Mentions · 30d5
- All mentions5
- First seenOct 28, 2026
- Last mentioned2h ago
Timeline
5 articles · newest firstMax-severity GitLab flaw exploited against Alpine Linux
CVE-2026-97229 allows unauthenticated code execution; Alpine rebuilt its instance, and CISA gave agencies three days to patch.
82
CISA adds exploited GitLab RCE and Cisco firewall DoS to KEV
Federal civilian agencies are told to apply fixes for both flaws by November 1, 2026.
82
Attacker probed Alpine GitLab via CVSS 10 flaw (CVE-2026-97229)
Alpine rebuilt gitlab.alpinelinux.org and reset passwords after probes; GitLab upgrades alone miss installs on stock Ruby.
82
Alpine rebuilds GitLab after CVE-2026-97229 exploit attempts
Alpine found no proof of code execution or package tampering, but reset every password and replaced GitLab secret keys.
78
Related CVEs
by mentions- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
- CVE-2026-76418<1%8.6Unauthenticated DoS in Cisco ASA and FTD SSL VPN with secondary auth
Appears with
- GitLabvendor · 5
- CISAorganization · 3
- Rubyproduct · 3
- GitLab Community Editionproduct · 2
- GitLab Enterprise Editionproduct · 2
- Ciscovendor · 2
- Secure Firewall Adaptive Security Applianceproduct · 1
- Rapid7organization · 1
- Secure Firewall Threat Defenseproduct · 1
- alpinelinux/gitlabproduct · 1
- Cisco Secure Firewall ASAproduct · 1
- Cisco Secure Firewall FTDproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.