What you need to know today.
GitLab RCE and Cisco firewall DoS flaws added to CISA KEV due to active exploitation.
A critical remote code execution vulnerability in GitLab (CVE-2026-97229) has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog. This flaw, affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2, could allow an unauthenticated user to execute arbitrary code under certain conditions. The vulnerability stems from issues in the Ruby regex engine, and multiple security researchers have published proof-of-concept exploits, with active exploitation observed.
Cisco has patched a critical vulnerability (CVE-2026-76418) in its Secure Firewall ASA and FTD software that allowed unauthenticated, remote attackers to cause a denial-of-service condition by crashing the SSL VPN service. This flaw was also added to the CISA KEV catalog due to active exploitation. This is the second such VPN-related zero-day exploited in Cisco