CISA Adds Exploited GitLab RCE and Cisco Flaws to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two security vulnerabilities affecting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV) catalog. The agency cited clear evidence that these specific flaws are currently being actively exploited in real-world cyberattacks.

Qisqacha: - CISA added new flaws to the KEV catalog - GitLab and Cisco software are affected - Active exploitation in the wild has been confirmed

Vulnerability Details and Risk Assessment Among the added entries is CVE-2026-97229, which carries a maximum CVSS severity score of 10.0. This issue is identified as an integer overflow or wraparound vulnerability impacting both GitLab Community Edition and Enterprise Edition. Additionally, the list includes a Cisco firewall denial-of-service (DoS) flaw. Such high-severity vulnerabilities pose a severe risk to enterprise networks and digital infrastructure worldwide.

What This Means for Organizations and IT Pros Inclusion in the KEV catalog mandates federal agencies in the United States to apply remediation measures within strict deadlines. Private organizations and system administrators are also strongly advised to patch their systems immediately to prevent potential breaches.