CISA has added two actively exploited flaws affecting Cisco and GitLab to its Known Exploited Vulnerabilities catalog.
The update covers GitLab vulnerability CVE-2026-97229 and Cisco firewall flaw CVE-2026-76418, emphasizing the need for timely patching in infrastructure components.
The attempted attack on GitLab
The first issue concerns GitLab and could allow someone who is not logged in to perform actions on the system remotely by sending specially configured settings.
The addition of the issue to the list came after an incident announced by Alpine Linux, as unknown parties unsuccessfully attempted to exploit it on October 20 and 21, 2026. The perpetrators sent settings that caused system processes to crash, although the attempt failed at the next step in four of these cases.
During the attempts, the attackers downloaded a GitLab installation file, while subsequent access attempts on October 25 and 26 were blocked. As a precautionary measure, Alpine Linux rebuilt its system from scratch, confirming that there was no evidence of tampering with its official packages or releases.
The problem with Cisco security systems
The second issue concerns Cisco's security and networking software. A technical flaw could allow remote users without a password to cause the device to unexpectedly reboot, disrupting its operation.
↳
READ ALSO
HACKS.GR / RELATED
Vulnerabilities & Security Updates
Serious security flaw in Linux systems allows control by strangers
↗
Cisco had reported in early October 2026 that it was aware of actual attacks exploiting this issue. However, the company has not publicly disclosed the identity of the attackers, the number of organizations targeted, or their actions after initial access.
G
HACKS.GR / GOOGLE SEARCH
Hacks.gr on Google
Set Hacks.gr as a preferred source.
Preferred source
↗
end of article
Top comments (0)