CISA Adds Actively Exploited Git Lab RCE and Cisco Firewall DoS Flaws to KEV
Summary: CISA added two flaws affecting Cisco and GitLab software to its Known Exploited Vulnerabilities catalog on Thursday, citing evidence of active exploitation. Cisco said it became aware of active exploitation of its vulnerability earlier this month, while the GitLab flaw was tied to an Alpine Linux incident in which an unknown actor sent crafted CI configurations that crashed GitLab worker processes eight times on October 20 and 21, 2026, and later downloaded Alpine Linux's GitLab container image.
Key Takeaway: Alpine Linux's maintainers said the attack came close to working and, though they found no evidence it succeeded, rebuilt the instance from scratch because they could not rule it out - and FCEB agencies have until November 1, 2026 to apply fixes.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-97229
- Related
- CISA Adds Two Known Exploited Vulnerabilities to Catalog Cyber Risks · Oct 29, 2026CVE-2026-97229: Git Lab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026