CYBERSECURITYTRACKER
Permanent story citation

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11869

As cited

Copy frozen at (site build).

vulnerabilities

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

The Cybersecurity and Infrastructure Security Agency (CISA) added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on October 30, 2026. CVE-2026-97229, a CVSS 10.0 integer overflow flaw in GitLab Community Edition and Enterprise, and a Cisco firewall denial of service (DoS) vulnerability were included based on evidence of active exploitation.

Why it matters: GitLab administrators and Cisco firewall operators face immediate risk from active exploitation of these remote code execution (RCE) and DoS vulnerabilities, and CISA KEV listing signals these flaws warrant emergency patching within 24 to 48 hours.

VendorsCiscoGitLab
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

The Cybersecurity and Infrastructure Security Agency (CISA) added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on October 30, 2026. CVE-2026-97229, a CVSS 10.0 integer overflow flaw in GitLab Community Edition and Enterprise, and a Cisco firewall denial of service (DoS) vulnerability were included based on evidence of active exploitation.

Why it matters: GitLab administrators and Cisco firewall operators face immediate risk from active exploitation of these remote code execution (RCE) and DoS vulnerabilities, and CISA KEV listing signals these flaws warrant emergency patching within 24 to 48 hours.

VendorsCiscoGitLab
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary