Covered by 2 outlets — first reported by The Hacker News, Oct 30, 07:27 UTC
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Summary
CISA has added two flaws to its catalogue of vulnerabilities attackers are using, citing evidence of active exploitation: one in GitLab and one in Cisco firewall software that can cause a denial of service. The GitLab flaw, CVE-2026-97229, is rated 10.0 for severity and affects GitLab Community Edition and Enterprise Edition. BleepingComputer reports it was patched earlier this month and attackers have now started exploiting it.
AI summary by the SecurityTabs newsroom, checked against The Hacker News, BleepingComputer. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
The Hacker NewsFirst report
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation.
BleepingComputer
CISA says max severity GitLab flaw now exploited in the wild
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- ConceptCISA · Cybersecurity and Infrastructure Security AgencyThe US government's cybersecurity agency, which issues alerts and runs the KEV catalog.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.