CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

CISA has added CVE-2026-97229, a critical CVSS 10.0 integer overflow vulnerability in GitLab Community and Enterprise Editions, to its Known Exploited Vulnerabilities catalog. The flaw allows attackers to send crafted CI configurations that crash worker processes and potentially lead to remote code execution. Alpine Linux recently disclosed an active exploitation attempt targeting its unpatched GitLab instance using this vulnerability.

Source: The Hacker News

How Mangudai Discovers This Issue

Mangudai's port and service scanning module observes publicly accessible web services and HTTP banners, allowing it to identify exposed GitLab instances and match their advertised version signatures against known CVEs.

Continuous Autonomous AuditsMangudai scans target perimeters multiple times daily to catch configuration drift instantly.

Zero-Agent ArchitectureIdentifies exposure angles without requiring local installations or server access.

Check what your own domain exposes

A free scan lists the services, software versions, certificates and headers your domain shows to the internet, so you can see whether a flaw like this could apply to you. It reads what is visible from the outside; it does not confirm that a specific vulnerability can be exploited.

Launch Scan For My Domain