Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

CISA adds exploited GitLab integer overflow CVE-2026-97229 to KEV

Original title: CISA Adds One Known Exploited Vulnerability to Catalog

CISA Advisoriesby CISA ()1 min read1
Read at cisa.gov
AI summary · x-ai/grok-4.7Summaries by Vani AI

FCEB agencies must prioritize the GitLab flaw on exposed assets and check for compromise before patching.

CISA added CVE-2026-97229, an integer overflow or wraparound in GitLab Community Edition and Enterprise Edition, to the Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. No affected or fixed versions are named. Under BOD 26-04, federal civilian agencies must rapidly remediate high-risk KEV entries on publicly exposed assets and check whether systems were compromised before the patch; CISA urges other organizations to prioritize KEV flaws as well.

Unconfirmed: Affected versions, the fixed release, and the exact post-exploitation impact are not stated.

Key facts
  • CVE-2026-97229 affects GitLab Community Edition and Enterprise Edition.
  • CISA cites evidence of active exploitation.
  • BOD 26-04 applies only to FCEB agencies.
  • KEV nominations require a CVE ID, exploitation evidence, and mitigation guidance.
Security assessment · AI, from the articleExploited in the wild

Impact: Integer overflow in GitLab under active exploitation

ProductAffected
GitLab Community Edition—
GitLab Enterprise Edition—
What to do
  1. 1.Prioritize remediation of CVE-2026-97229 on publicly exposed GitLab assets.
  2. 2.FCEB agencies should check for compromise before applying the patch.
Analyze CVE-2026-97229 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-97229
Tags
gitlabkevcisainteger-overflowbod-26-04
Vendors
GitLab
Products
GitLab Community EditionGitLab Enterprise Edition
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-97229
Unauthenticated RCE in GitLab CE/EE via CI/CD regex
10.018%KEVPoC ×5
KEV

From the original article

1 min read at cisa.gov

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.

CISA Advisories

By CISA · cisa.gov

Read the full article at CISA Advisories

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.