vulnerability
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
CriticalCVSS 10.0ExploitedEPSS 18%
Summary
CISA has added two actively exploited vulnerabilities – a GitLab Remote Code Execution (RCE) and a Cisco firewall Denial of Service (DoS) flaw – to its KEV list. Federal Civilian Executive Branch (FCEB) agencies are urged to apply the fixes by November 1st.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 21 other source(s)
- Node.js Brotli Decoder Bug Could Allow Remote Code Execution in All Supported Versions
- Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
- OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
- Vulnérabilité dans les produits Microsoft (26 octobre 2026)
- Multiples vulnérabilités dans Microsoft .Net (26 octobre 2026)
- Node2Shell Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Microsoft releases emergency .NET security fixes for Google Brotli bug
- Vulnérabilité dans les produits Palo Alto Networks (27 octobre 2026)
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
- Microsoft releases out-of-band Windows fixes with certificate updates
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges
- CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts
- Lessons from Cybersecurity Black Week
- TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices
- Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
- In the year AI re-wrote the infosec rulebook, it’s comforting to know crypto exchanges still have bad security
- Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
- PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress