CISA Adds Two Known Exploited Vulnerabilities to Catalog
CRITICAL · VULNERABILITYCVE-2026-97229redteam/daily · 2 sources
- Severity
- Critical
- Highest CVSS
- 10.0
- Exploited
- Yes
- Sources
- 2
What happened
Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.
From 2 sources · Wrong?
What to do
- Update Gitlab to the fixed version for your release line (fixes CVE-2026-97229): 19.2.8, 19.3.5 or 19.4.2.
- Update Ruby-lang Ruby to the fixed version for your release line (fixes CVE-2026-97229): 3.3.13, 3.4.12 or 4.0.8.
- CVE-2026-97229 is being exploited: treat it as urgent.
- Check whether you use Gitlab: add it to your watchlist to hear when it is affected. Open your watchlist
Based on advisory data
Vulnerabilities
- CVE-2026-97229CVSS 10.0ExploitedGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expressi
- CVE-2026-104286CVSS 9.8ExploitedAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all versions may allow an unauthenticated attacker to
- CVE-2026-21589CVSS 9.3ExploitedThis is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerability allows an unauthenticated attacker to access specific files
- CVE-2026-109619CVSS 9.2ExploitedPHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subsequent requests may read or branch on thi
- CVE-2026-109618CVSS 9.2ExploitedPHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may r
- CVE-2026-110447CVSS 9.2ExploitedCollabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't run
- CVE-2026-111497CVSS 9.2ExploitedA buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execu
- CVE-2026-96951CVSS 8.8ExploitedImproper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-76418CVSS 8.6ExploitedA vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of servic
- CVE-2026-46300CVSS 7.8ExploitedIn the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same externally-owned or page-cache
- CVE-2026-41709CVSS 2.7ExploitedVMware ESX contains an insufficient logging vulnerability. A malicious administrator could exploit this issue to perform certain operations without them being logged.
- CVE-2026-7273Exploited
- CVE-2026-76504Exploited
- CVE-2026-86950Exploited
- CVE-2026-87902Exploited
- CVE-2026-88771Exploited
- CVE-2026-88772Exploited
- CVE-2026-88779Exploited
- CVE-2026-48356Exploited
- CVE-2025-39964Exploited
- CVE-2026-102489Exploited
- CVE-2026-102490Exploited
- CVE-2026-104935Exploited
- CVE-2026-114625Exploited
- CVE-2025-39682Exploited
- CVE-2026-53266Exploited
- CVE-2026-5430Exploited
- CVE-2026-58704Exploited
- CVE-2026-71362Exploited
Full story timeline · 65 updates
- Sat 23 MayCVE-2026-46300 published, CVSS 7.8NVD
- Thu 30 JulyCVE-2026-41709 published, CVSS 2.7NVD
- Wed 16 SeptemberCVE-2026-58704 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Fri 18 SeptemberCVE-2025-39964 added to CISA’s exploited listCISA KEV
- CVE-2025-39682 added to CISA’s exploited listCISA KEV
- CVE-2026-53266 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Mon 21 SeptemberCVE-2026-7273 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Tue 22 SeptemberCISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts
- Thu 24 SeptemberCVE-2026-5430 added to CISA’s exploited listCISA KEV
- CVE-2026-71362 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Fri 25 SeptemberCVE-2026-87902 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Sun 27 SeptemberCVE-2026-88771 added to CISA’s exploited listCISA KEV
- CVE-2026-88772 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Tue 29 SeptemberCVE-2026-86950 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Wed 30 SeptemberCVE-2026-76504 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Thu 1 OctoberCVE-2026-104286 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- CVE-2026-104286 published, CVSS 9.8NVD
- Fri 2 OctoberCVE-2026-102489 added to CISA’s exploited listCISA KEV
- CVE-2026-102490 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Sun 4 OctoberCVE-2026-88779 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Mon 5 OctoberCVE-2026-21589 published, CVSS 9.3NVD
- Tue 13 OctoberCVE-2026-96951 added to CISA’s exploited listCISA KEV
- CVE-2026-104935 added to CISA’s exploited listCISA KEV
- CVE-2026-97229 published, CVSS 10.0NVD
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- CVE-2026-96951 published, CVSS 8.8NVD
- Wed 14 OctoberCVE-2026-110447 published, CVSS 9.2NVD
- CISA Adds Four Known Exploited Vulnerabilities to CatalogCISA Alerts
- Thu 15 OctoberCVE-2026-21589 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Tue 20 OctoberCISA Adds Six Known Exploited Vulnerabilities to CatalogCISA Alerts
- Wed 21 OctoberCritical Vulnerabilities in PHP Require Immediate PatchingCISA Alerts
- CVE-2026-109618 published, CVSS 9.2NVD
- CVE-2026-109619 published, CVSS 9.2NVD
- Thu 22 OctoberCVE-2026-111497 published, CVSS 9.2NVD
- Fri 23 OctoberCVE-2026-110447 added to CISA’s exploited listCISA KEV
- CVE-2026-114625 added to CISA’s exploited listCISA KEV
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- CISA Adds One Known Exploited Vulnerability to CatalogCISA Alerts
- Mon 26 OctoberCVE-2026-109619 added to CISA’s exploited listCISA KEV
- CVE-2026-109618 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Tue 27 OctoberCVE-2026-111497 added to CISA’s exploited listCISA KEV
- CVE-2026-48356 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Wed 28 OctoberCVE-2026-46300 added to CISA’s exploited listCISA KEV
- CVE-2026-41709 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- CVE-2026-76418 published, CVSS 8.6NVD
- Thu 29 OctoberCVE-2026-97229 added to CISA’s exploited listCISA KEV
- CVE-2026-76418 added to CISA’s exploited listCISA KEV
- CISA Adds Two Known Exploited Vulnerabilities to CatalogCISA Alerts
- Tue 3 NovemberProduct showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch upHelp Net Security
Who reported · 2 outlets
CISA AlertsHelp Net Security