Asl matn EN tilida, manba saytidan olindi. Manba ↗

CVE/vulnerabilityCyber Security NewsVulnerability

1 min.Read

CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229

By Divya

October 30, 2026

Share FacebookTwitterPinterestWhatsApp

The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that CVE-2026-97229, a critical vulnerability affecting both GitLab Community Edition and Enterprise Edition, is actively being exploited.

On October 29, 2026, CISA added this flaw to its Known Exploited Vulnerabilities catalog, increasing the urgency for organizations running affected servers to take action.

This vulnerability allows unauthenticated attackers to execute arbitrary code on a GitLab server by using a specially crafted regular expression within a CI/CD configuration. GitLab attributes the issue to insufficient regular expression validation and classifies it as an integer overflow or wraparound weakness, listed under CWE-190.

GitLab Vulnerability CVE-2026-97229

According to the official CVE record, the vulnerability carries a CVSS v3.1 score of 10.0. Its vector describes network-based exploitation with low attack complexity, no required privileges, and no user interaction. Successful exploitation can severely impact confidentiality, integrity, and availability.

Integer overflow occurs when an arithmetic result exceeds the range supported by its underlying representation. Unexpected values can disrupt security checks or memory-related operations, although the published GitLab description does not identify the precise internal exploitation sequence.

The issue previously prompted critical GitLab security updates addressing unauthenticated remote code execution. CISA’s confirmation now establishes that exploitation is occurring beyond a theoretical attack scenario.

Affected releases include:

GitLab 19.2 versions before 19.2.8.

GitLab 19.3 versions before 19.3.5.

GitLab 19.4 versions before 19.4.2.

GitLab credits security researcher joaxcar with reporting the vulnerability through its HackerOne bug bounty program. The CVE record was published on October 13, 2026.

The supplied catalog entry specifies a November 1, 2026, remediation deadline and marks forensic triage as required under BOD 26-04. It lists ransomware involvement as unknown; that designation does not establish whether ransomware operators have exploited the flaw.

Organizations must apply vendor-directed mitigations while following the applicable patching and forensic triage requirements. The entry also directs stakeholders to evaluate each asset’s internet exposure and follow relevant cloud-service guidance, or discontinue product use when mitigations are unavailable.

This incident follows earlier GitLab patches addressing CI/CD tampering and data exposure, underscoring the importance of protecting development infrastructure without conflating separate vulnerabilities.

For affected deployments, the fixed releases are 19.2.8, 19.3.5, and 19.4.2. Administrators should verify their installed branch against these thresholds and prioritize remediation because CISA has confirmed exploitation. The public sources reviewed do not identify attackers, victim organizations, or campaign scale.

Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs.

Tags cyber security Cyber Security News Vulnerability

DivyaDivya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Hot this week

Infosec- Resources How To Access Dark Web Anonymously and know its Secretive and Mysterious Activities

June 4, 2023 1

What is Deep Web

The deep web, invisible web, or...

SOC Architecture How to Build and Run a Security Operations Center (SOC Guide) – 2023

June 3, 2023 12

Today’s Cyber security operations center (CSOC) should have everything...

Cyber Security News Russian Hackers Bypass EDR to Deliver a Weaponized TeamViewer Component

October 18, 2023 0

TeamViewer's popularity and remote access capabilities make it an...

Checklist Web Server Penetration Testing Checklist – 2026

January 6, 2026 0

Web server pentesting is performed under three significant categories: identity,...

Infosec- Resources ATM Penetration Testing – Advanced Testing Methods to Find The Vulnerabilities

June 4, 2023 4

ATM Penetration testing, Hackers have found different approaches to...

Topics

Acquisition Adobe Adware AI Amazon Amazon AWS AMD Android Anti Virus Antimalware ANY RUN Apache API Apple APT Artificial Intelligence Avast AWS Azure Backdoor Bitcoin Bluetooth Botnet Browser Buffer over flow Bug Bounty Business Chatbots ChatGPT Checklist Chrome Cisco CISO CISO Advisory Cloud Cloud Security Cloudflare Computer Security Course CPU Cross site Scripting cryptocurrency Cryptocurrency hack CVE/vulnerability Cyber Advisory Cyber AI Cyber Attack Cyber Crime cyber security Cyber security Course Cyber Security News Cyber Security Resources Cybersecurity Newsletter Dark Web Data Breach Data Governance DDOS Deals DeepSeek Discord DNS Dos Attack Drive Dropbox Education Email Email Security Ethical Hacking Exploit Exploitation Tools Extratorrents FACEBOOK Featured Firefox Firefox News Firewall Forensics Tools game GenAI GitHub GitLab Gmail Google Google dorks Governance GRC Hacking Books Hacks Hardware Hacking HBO HTML HTTP IBM IIS Incident Response Information Gathering Information Security Risks Infosec- Resources Insider Threats Instagram More

Cyber Security News Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures

0

Microsoft has resolved an issue in Windows 11 that...

CVE/vulnerability Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

0

Hackers exploited a chain of zero-day vulnerabilities in Ivanti...

Cyber Security News Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits

0

Russian-language "traffer" teams are selling ready-made fake prediction-market platforms...

Cyber Security News New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections

0

Nozomi Networks Labs has documented Kairos, a previously undocumented...

Cyber Security News DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data

0

Zimperium zLabs has found that the Coruna iOS exploit...

Cyber Security News New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs

0

Cisco Talos has uncovered NIK C2, a Go-based, 64-bit...

Cyber Security News Claude AI Exposes Internal Sandbox Details That Help Researcher Bypass Local Connection Restrictions

0

A Bishop Fox researcher investigating Claude’s sandbox obtained an...

AI Malicious Claude Code VS Code Extension Installs Persistent SSH Backdoor to Give Attackers Remote Access

0

A trojanized version of the Claude Code extension, identified...

Related Articles

Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures

Cyber Security News

October 30, 2026

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

CVE/vulnerability

October 30, 2026

Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits

Cyber Security News

October 30, 2026

New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections

Cyber Security News

October 30, 2026

DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data

Cyber Security News

October 30, 2026

Recent News

Microsoft Releases Emergency Fix for Windows 11 Remote Desktop Connection Failures

Divya - October 30, 2026

Hackers Exploit Ivanti Connect Secure Zero-Day Vulnerabilities to Gain Root Access and Steal Credentials

Divya - October 30, 2026

Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits

Kavichselvan - October 30, 2026

New Kairos DDoS Botnet Hijacks Linux Devices to Overwhelm Servers With Thousands of TCP Connections

Kavichselvan - October 30, 2026

DarkSword iOS Exploit Chain Bypasses Safari Sandbox and Steals Apple Notes Data

Kavichselvan - October 30, 2026

New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs

Kavichselvan - October 30, 2026