CVE/zaiflikKiberxavfsizlik yangiliklariZaiflik
1 daqiqa o'qish
CISA GitLab zaifligi CVE-2026-97229 faol ekspluatatsiya qilinayotganini tasdiqladi
Muallif: Divya
30-oktabr, 2026
Ulashish FacebookTwitterPinterestWhatsApp
Kiberxavfsizlik va infratuzilma xavfsizligi agentligi (CISA) GitLab Community Edition va Enterprise Edition'ga ta'sir qiluvchi muhim zaiflik CVE-2026-97229 faol ekspluatatsiya qilinayotganini tasdiqladi.
2026-yil 29-oktabrda CISA ushbu kamchilikni Ma'lum ekspluatatsiya qilingan zaifliklar katalogiga qo'shdi, bu esa ta'sirlangan serverlarni ishlatayotgan tashkilotlar uchun chora ko'rish zarurligini oshirdi.
Ushbu zaiflik autentifikatsiya qilinmagan hujumchilarga CI/CD konfiguratsiyasidagi maxsus tayyorlangan muntazam ifoda yordamida GitLab serverida ixtiyoriy kodni bajarish imkonini beradi. GitLab muammoni yetarli darajada muntazam ifoda tekshiruvi yo'qligi bilan bog'laydi va uni butun son to'lib ketishi yoki o'ralishi zaifligi (CWE-190) sifatida tasniflaydi.
GitLab zaifligi CVE-2026-97229
Rasmiy CVE yozuviga ko'ra, zaiflik CVSS v3.1 bo'yicha 10.0 ballga ega. Uning vektori tarmoq orqali ekspluatatsiyani, past hujum murakkabligini, talab qilinadigan imtiyozlar yo'qligini va foydalanuvchi o'zaro ta'siri yo'qligini tavsiflaydi. Muvaffaqiyatli ekspluatatsiya maxfiylik, yaxlitlik va mavjudlikka jiddiy ta'sir ko'rsatishi mumkin.
Butun son to'lib ketishi arifmetik natija asosiy vakillik tomonidan qo'llab-quvvatlanadigan diapazondan oshib ketganda yuz beradi. Kutilmagan qiymatlar xavfsizlik tekshiruvlari yoki xotira bilan bog'liq operatsiyalarni buzishi mumkin, garchi e'lon qilingan GitLab tavsifida aniq ichki ekspluatatsiya ketma-ketligi aniqlanmagan bo'lsa ham.
Muammo avval autentifikatsiya qilinmagan masofaviy kod bajarish bilan bog'liq muhim GitLab xavfsizlik yangilanishlarini talab qilgan edi. CISA tasdig'i endi ekspluatatsiya nazariy hujum ssenariysidan tashqarida sodir bo'layotganini ko'rsatadi.
Ta'sirlangan versiyalar:
GitLab 19.2 versiyalari 19.2.8 dan oldin.
GitLab 19.3 versiyalari 19.3.5 dan oldin.
GitLab 19.4 versiyalari 19.4.2 dan oldin.
GitLab zaiflikni HackerOne xato mukofot dasturi orqali xabar qilgan xavfsizlik tadqiqotchisi joaxcar'ga kredit beradi. CVE yozuvi 2026-yil 13-oktabrda e'lon qilingan.
Ta'minlangan katalog yozuvi 2026-yil 1-noyabrni tuzatish muddati sifatida belgilaydi va BOD 26-04 bo'yicha sud-tibbiy triage talab qilinishini ko'rsatadi. U ransomware ishtirokini noma'lum deb belgilaydi; bu belgilash ransomware operatorlari kamchilikdan foydalanib-foydalanmaganini aniqlamaydi.
Tashkilotlar tegishli yamoq va sud-tibbiy triage talablariga amal qilgan holda sotuvchi tomonidan yo'naltirilgan yumshatish choralarini qo'llashlari kerak. Yozuv shuningdek manfaatdor tomonlarga har bir aktivning internetga ochiqligini baholashni va tegishli bulut xizmati yo'riqnomalariga amal qilishni, yoki yumshatish choralar mavjud bo'lmaganda mahsulotdan foydalanishni to'xtatishni yo'naltiradi.
Ushbu hodisa avval CI/CD buzilishi va ma'lumotlar oshkor bo'lishi bilan bog'liq GitLab yamoqlaridan keyin sodir bo'ldi, bu esa alohida zaifliklarni aralashtirmasdan ishlab chiqish infratuzilmasini himoya qilish muhimligini ta'kidlaydi.
Ta'sirlangan o'rnatishlar uchun tuzatilgan versiyalar 19.2.8, 19.3.5 va 19.4.2. Administratorlar o'rnatilgan filialni ushbu chegaralar bilan solishtirishlari va CISA ekspluatatsiyani tasdiqlaganligi sababli tuzatishni ustuvor qilishlari kerak. Ko'rib chiqilgan ommaviy manbalar hujumchilar, jabrlangan tashkilotlar yoki kampaniya ko'lamini aniqlamaydi.
SOC'ga hodisalarni tez to'xtatish uchun ogohlantirish kontekstini bering. 16K SOC'dan tahdid razvedkasini integratsiya qiling.
Teglar kiberxavfsizlik Kiberxavfsizlik yangiliklari Zaiflik
Divya — GBhackers'da Kiber hujumlar, tahdidlar, buzilishlar, zaifliklar va kiber dunyodagi boshqa voqealarni yorituvchi Katta jurnalist.
Bu hafta issiq
Infosec- Resurslar Qanday qilib Dark Web'ga anonim kirish va uning maxfiy va sirli faoliyatlarini bilish
4-iyun, 2023 1
Chuqur veb nima
Chuqur veb, ko'rinmas veb yoki...
SOC arxitekturasi Xavfsizlik operatsiyalari markazini (SOC qo'llanmasi) qanday qurish va ishlatish — 2023
3-iyun, 2023 12
Bugungi kiberxavfsizlik operatsiyalari markazi (CSOC) hamma narsaga ega bo'lishi kerak...
Kiberxavfsizlik yangiliklari Rossiya xakerlari EDR'ni chetlab o'tib, qurollangan TeamViewer komponentini yetkazib berishdi
18-oktabr, 2023 0
TeamViewer'ning mashhurligi va masofaviy kirish imkoniyatlari uni...
Tekshiruv ro'yxati Veb-server penetratsiya sinovi tekshiruv ro'yxati — 2026
6-yanvar, 2026 0
Veb-server pentesting uchta muhim kategoriya ostida amalga oshiriladi: identifikatsiya,...
Infosec- Resurslar Bankomat penetratsiya sinovi — zaifliklarni topish uchun ilg'or sinov usullari
4-iyun, 2023 4
Bankomat penetratsiya sinovi, xakerlar turli yondashuvlarni topishdi...
Mavzular Sotib olish Adobe Adware AI Amazon Amazon AWS AMD Android Antivirus Antimalware ANY RUN Apache API Apple APT Sun'iy intellekt Avast AWS Azure Orqa eshik Bitcoin Bluetooth Botnet Brauzer Bufer to'lib ketishi Xato mukofoti Biznes Chatbotlar ChatGPT Tekshiruv ro'yxati Chrome Cisco CISO CISO maslahat Bulut Bulut xavfsizligi Cloudflare Kompyuter xavfsizligi Kurs CPU Saytlararo skriptlash Kriptovalyuta Kriptovalyuta xakerligi CVE/zaiflik Kiber maslahat Kiber AI Kiber hujum Kiber jinoyat kiberxavfsizlik Kiberxavfsizlik kursi Kiberxavfsizlik yangiliklari Kiberxavfsizlik resurslari Kiberxavfsizlik axborotnomasi Dark Web Ma'lumotlar buzilishi Ma'lumotlar boshqaruvi DDOS Shartnomalar DeepSeek Discord DNS DoS hujumi Drive Dropbox Ta'lim Elektron pochta Elektron pochta xavfsizligi Etik xakerlik Ekspluatatsiya Ekspluatatsiya vositalari Extratorrents FACEBOOK Tavsiya etilgan Firefox Firefox yangiliklari Xavfsizlik devori Sud-tibbiy vositalar o'yin GenAI GitHub GitLab Gmail Google Google dorks Boshqaruv GRC Xakerlik kitoblari Xakerlik Uskuna xakerligi HBO HTML HTTP IBM IIS Hodisaga javob Ma'lumot yig'ish Axborot xavfsizligi xatarlari Infosec- Resurslar Ichki tahdidlar Instagram Ko'proq
Kiberxavfsizlik yangiliklari Microsoft Windows 11 masofaviy ish stoli ulanishi nosozliklari uchun shoshilinch tuzatishni e'lon qildi
0
Microsoft Windows 11 da masofaviy ish stoli ulanishi bilan bog'liq muammoni hal qildi...
CVE/zaiflik Xakerlar Ivanti Connect Secure nol-kun zaifliklaridan foydalanib, ildiz kirish huquqini qo'lga kiritishdi va ma'lumotlarni o'g'irlashdi
0
Xakerlar Ivanti'da nol-kun zaifliklar zanjiridan foydalanib...
Kiberxavfsizlik yangiliklari Soxta Polymarket firibgarlik tarmog'i kriptovalyuta depozitlarida deyarli 11 million dollar talab qilmoqda
0
Rossiya tilidagi "traffer" jamoalari tayyor soxta bashorat bozori platformalarini sotmoqda...
Kiberxavfsizlik yangiliklari Yangi Kairos DDoS botneti Linux qurilmalarini egallab, serverlarni minglab TCP ulanishlari bilan to'ldiradi
0
Nozomi Networks Labs avval hujjatlashtirilmagan Kairos'ni hujjatlashtirdi...
Kiberxavfsizlik yangiliklari DarkSword iOS ekspluatatsiya zanjiri Safari sandbox'ini chetlab o'tib, Apple Notes ma'lumotlarini o'g'irlaydi
0
Zimperium zLabs Coruna iOS ekspluatatsiya zanjirini topdi...
Kiberxavfsizlik yangiliklari Yangi AI quvvatlangan NIK C2 zararli dasturi OpenAI API'dan foydalanib, xakerlarga ma'lumotlarni o'g'irlash va Windows kompyuterlarini boshqarishda yordam beradi
0
Cisco Talos Go asosidagi, 64-bitli NIK C2'ni aniqladi...
Kiberxavfsizlik yangiliklari Claude AI ichki sandbox tafsilotlarini fosh etib, tadqiqotchiga mahalliy ulanish cheklovlarini chetlab o'tishda yordam beradi
0
Bishop Fox tadqiqotchisi Claude sandbox'ini tekshirayotganda...
AI Zararli Claude Code VS Code kengaytmasi doimiy SSH orqa eshikni o'rnatib, hujumchilarga masofaviy kirish huquqini beradi
0
Trojanlashtirilgan Claude Code kengaytmasi versiyasi aniqlangan...
Tegishli maqolalar
Microsoft Windows 11 masofaviy ish stoli ulanishi nosozliklari uchun shoshilinch tuzatishni e'lon qildi
Kiberxavfsizlik yangiliklari
30-oktabr, 2026
Xakerlar Ivanti Connect Secure nol-kun zaifliklaridan foydalanib, ildiz kirish huquqini qo'lga kiritishdi va ma'lumotlarni o'g'irlashdi
CVE/zaiflik
30-oktabr, 2026
Soxta Polymarket firibgarlik tarmog'i kriptovalyuta depozitlarida deyarli 11 million dollar talab qilmoqda
Kiberxavfsizlik yangiliklari
30-oktabr, 2026
Yangi Kairos DDoS botneti Linux qurilmalarini egallab, serverlarni minglab TCP ulanishlari bilan to'ldiradi
Kiberxavfsizlik yangiliklari
30-oktabr, 2026
DarkSword iOS ekspluatatsiya zanjiri Safari sandbox'ini chetlab o'tib, Apple Notes ma'lumotlarini o'g'irlaydi
Kiberxavfsizlik yangiliklari
30-oktabr, 2026
So'nggi yangiliklar
Microsoft Windows 11 masofaviy ish stoli ulanishi nosozliklari uchun shoshilinch tuzatishni e'lon qildi
Divya - 30-oktabr, 2026
Xakerlar Ivanti Connect Secure nol-kun zaifliklaridan foydalanib, ildiz kirish huquqini qo'lga kiritishdi va ma'lumotlarni o'g'irlashdi
Divya - 30-oktabr, 2026
Soxta Polymarket firibgarlik tarmog'i kriptovalyuta depozitlarida deyarli 11 million dollar talab qilmoqda
Kavichselvan - 30-oktabr, 2026
Yangi Kairos DDoS botneti Linux qurilmalarini egallab, serverlarni minglab TCP ulanishlari bilan to'ldiradi
Kavichselvan - 30-oktabr, 2026
DarkSword iOS ekspluatatsiya zanjiri Safari sandbox'ini chetlab o'tib, Apple Notes ma'lumotlarini o'g'irlaydi
Kavichselvan - 30-oktabr, 2026
Yangi AI quvvatlangan NIK C2 zararli dasturi OpenAI API'dan foydalanib, xakerlarga ma'lumotlarni o'g'irlash va Windows kompyuterlarini boshqarishda yordam beradi
Kavichselvan - 30-oktabr, 2026
CVE/vulnerabilityCyber Security NewsVulnerability
1 min.Read
CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229
By Divya
October 30, 2026
Share FacebookTwitterPinterestWhatsApp
The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition, is actively being exploited.
On October 29, 2026, CISA added this flaw to its Known Exploited Vulnerabilities catalog, increasing the urgency for organizations running affected servers to take action.
This vulnerability allows unauthenticated attackers to execute arbitrary code on a GitLab server by using a specially crafted regular expression within a CI/CD configuration. GitLab attributes the issue to insufficient regular expression validation and classifies it as an integer overflow or wraparound weakness, listed under CWE-190.
GitLab Vulnerability CVE-2026-97229
According to the official CVE record, the vulnerability carries a CVSS v3.1 score of 10.0. Its vector describes network-based exploitation with low attack complexity, no required privileges, and no user interaction. Successful exploitation can severely impact confidentiality, integrity, and availability.
Integer overflow occurs when an arithmetic result exceeds the range supported by its underlying representation. Unexpected values can disrupt security checks or memory-related operations, although the published GitLab description does not identify the precise internal exploitation sequence.
The issue previously prompted critical GitLab security updates addressing unauthenticated remote code execution. CISA’s confirmation now establishes that exploitation is occurring beyond a theoretical attack scenario.
Affected releases include:
GitLab 19.2 versions before 19.2.8.
GitLab 19.3 versions before 19.3.5.
GitLab 19.4 versions before 19.4.2.
GitLab credits security researcher joaxcar with reporting the vulnerability through its HackerOne bug bounty program. The CVE record was published on October 13, 2026.
The supplied catalog entry specifies a November 1, 2026, remediation deadline and marks forensic triage as required under BOD 26-04. It lists ransomware involvement as unknown; that designation does not establish whether ransomware operators have exploited the flaw.
Organizations must apply vendor-directed mitigations while following the applicable patching and forensic triage requirements. The entry also directs stakeholders to evaluate each asset’s internet exposure and follow relevant cloud-service guidance, or discontinue product use when mitigations are unavailable.
This incident follows earlier GitLab patches addressing CI/CD tampering and data exposure, underscoring the importance of protecting development infrastructure without conflating separate vulnerabilities.
For affected deployments, the fixed releases are 19.2.8, 19.3.5, and 19.4.2. Administrators should verify their installed branch against these thresholds and prioritize remediation because CISA has confirmed exploitation. The public sources reviewed do not identify attackers, victim organizations, or campaign scale.
Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.
Tags cyber security Cyber Security News Vulnerability
DivyaDivya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.
Hot this week
Infosec- Resources How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities
June 4, 2023 1
What is Deep Web
The deep web, invisible web, or...
SOC Architecture How to Build and Run a Security Operations Center (SOC Guide) – 2023
June 3, 2023 12
Today’s Cyber security operations center (CSOC) should have everything...
Cyber Security News Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component
October 18, 2023 0
TeamViewer's popularity and remote access capabilities make it an...
Checklist Web Server Penetration Testing Checklist – 2026
January 6, 2026 0
Web server pentesting is performed under three significant categories: identity,...
Infosec- Resources ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities
June 4, 2023 4
ATM Penetration testing, Hackers have found different approaches to...
Topics
Acquisition Adobe Adware AI Amazon Amazon AWS AMD Android Anti Virus Antimalware ANY RUN Apache API Apple APT Artificial Intelligence Avast AWS Azure Backdoor Bitcoin Bluetooth Botnet Browser Buffer over flow Bug Bounty Business Chatbots ChatGPT Checklist Chrome Cisco CISO CISO Advisory Cloud Cloud Security Cloudflare Computer Security Course CPU Cross site Scripting cryptocurrency Cryptocurrency hack CVE/vulnerability Cyber Advisory Cyber AI Cyber Attack Cyber Crime cyber security Cyber security Course Cyber Security News Cyber Security Resources Cybersecurity Newsletter Dark Web Data Breach Data Governance DDOS Deals DeepSeek Discord DNS Dos Attack Drive Dropbox Education Email Email Security Ethical Hacking Exploit Exploitation Tools Extratorrents FACEBOOK Featured Firefox Firefox News Firewall Forensics Tools game GenAI GitHub GitLab Gmail Google Google dorks Governance GRC Hacking Books Hacks Hardware Hacking HBO HTML HTTP IBM IIS Incident Response Information Gathering Information Security Risks Infosec- Resources Insider Threats Instagram More
Cyber Security News Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures
0
Microsoft has resolved an issue in Windows 11 that...
CVE/vulnerability Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials
0
Hackers exploited a chain of zero-day vulnerabilities in Ivanti...
Cyber Security News Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits
0
Russian-language "traffer" teams are selling ready-made fake prediction-market platforms...
Cyber Security News New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections
0
Nozomi Networks Labs has documented Kairos, a previously undocumented...
Cyber Security News DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data
0
Zimperium zLabs has found that the Coruna iOS exploit...
Cyber Security News New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs
0
Cisco Talos has uncovered NIK C2, a Go-based, 64-bit...
Cyber Security News Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions
0
A Bishop Fox researcher investigating Claude’s sandbox obtained an...
AI Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access
0
A trojanized version of the Claude Code extension, identified...
Related Articles
Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures
Cyber Security News
October 30, 2026
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials
CVE/vulnerability
October 30, 2026
Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits
Cyber Security News
October 30, 2026
New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections
Cyber Security News
October 30, 2026
DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data
Cyber Security News
October 30, 2026
Recent News
Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures
Divya - October 30, 2026
Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials
Divya - October 30, 2026
Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits
Kavichselvan - October 30, 2026
New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections
Kavichselvan - October 30, 2026
DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data
Kavichselvan - October 30, 2026
New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs
Kavichselvan - October 30, 2026