Skip to main content
Apexward Pulse
Type Vulnerability

Cisco · Code execution

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

1 source

At a glance

Low
30-day window, from the last update
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • Do not treat uncorroborated claims as confirmed breaches.

Questions to ask IT

  • Do we run GitLab, and which versions?
  • Is any of it reachable from the internet?
  • If it is not yet patched, what mitigation is in place, and will the fix be done by 29 Nov?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • Exploitation in the wild is not confirmed; treat this as a prioritisation signal.

Read the original reportThe Hacker News(opens in a new tab)

Products and services involved

Pulse

Last change 30 Oct · Recheck overdue since 31 Oct 2026, 08:15 UK time

  1. Story30 Oct 2026, 08:15 UK time · 30 Oct

    Linked reporting from The Hacker News (independent original reporter).

    Read source (The Hacker News)

1 entry so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to known-exploited catalogue