Alpine Linux
CompanyThreat actors named alongside
Source: RedTeamDaily stories that mention bothSecurity timeline
- Vulnerability reported by Zero Day Initiative BlogGitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
- Zero-day reported by Canadian Centre for Cyber SecurityCisco warns of actively exploited ASA and FTD VPN flaw CVE-2026-76418
Recent news
GitLab CVSS 10.0 flaw targeted on Alpine Linux server; Ivanti, LiteLLM and UAT-6275 also reported
Alpine Linux said on 28 October that an attacker tried to exploit GitLab flaw CVE-2026-97229 (CVSS 10.0) on its GitLab server a week after the fix was released, with no evidence of success. Roundups also cover actively exploited Ivanti Connect Secure and Windows Shell bugs, LiteLLM gateway flaws fixed in version 1.83.9, and Talos and Recorded Future research on UAT-6275, a Kazakhstan-nexus group targeting CIS governments.
Cisco warns of actively exploited ASA and FTD VPN flaw CVE-2026-76418
Cisco has patched CVE-2026-76418, a high-severity flaw (CVSS 8.6) in the remote access SSL VPN of Secure Firewall ASA and Threat Defense (FTD). An unauthenticated remote attacker can send a crafted request that forces a device reload, causing denial of service. The flaw is being exploited in the wild and has been added to CISA's KEV catalogue, with federal agencies required to remediate by 1 November 2026. Cisco urges immediate updating and offers a temporary mitigation of disabling secondary authentication on the tunnel group list or DefaultWEBVPNGroup.