CISA Adds Two Known Exploited Vulnerabilities to Catalog (CVE-2026-97229)
CISA has added two security flaws to its Known Exploited Vulnerabilities (KEV) Catalog following reports of active exploitation in the wild. The newly added vulnerabilities include CVE-2026-97229, an integer overflow issue in GitLab Community and Enterprise Editions, and CVE-2026-76418, a NULL pointer dereference flaw affecting Cisco Secure Firewall ASA and FTD software. Under Binding Operational Directive (BOD) 26-04, federal agencies are mandated to prioritize rapid remediation of these high-risk, publicly exposed assets.
Mangudai's port module identifies exposed GitLab instances and Cisco ASA/FTD interfaces by scanning reachable ports, capturing advertised service banners or version metadata, and matching them against known CVE signatures like CVE-2026-97229 and CVE-2026-76418.
Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.
Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.
Check what your own domain exposes
A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.
This website uses cookies to enhance user experience. By continuing to use our website, you agree to our Privacy Policy and Cookie Policy terms. Accept.
