CVE-2026-97229
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
10.0CVSS base score · critical (NVD)
18%Chance of exploitation in the next 30 days (FIRST EPSS)
ExploitedIn CISA KEV · federal patch deadline Nov 1, 2026
What happened
CISA added two actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-97229, a CVSS 10.0 integer overflow in GitLab Community and Enterprise editions enabling remote code execution, and a Cisco firewall denial-of-service flaw. Both show evidence of active exploitation in the wild. Organizations should prioritize patching these flaws immediately.
From the Intel60 brief of Oct 30, 2026. AI-written summary: check the sources before acting.
Intel60 briefs
- CriticalCISA adds GitLab RCE Cisco DoS to KEV catalogOct 30, 2026
- HighAlpine Linux GitLab attacked with CVSS 10.0 flawOct 29, 2026