CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
Summary
CISA has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: a GitLab RCE flaw and a Cisco Firewall DoS flaw. Both have been observed being actively exploited in the wild.
IFF Assessment
The addition of actively exploited vulnerabilities to CISA's KEV catalog indicates immediate threats to systems, requiring defenders to prioritize patching and mitigation efforts.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: November 01, 2026. Known ransomware use: Unknown.
Defender Context
Defenders should immediately prioritize patching or mitigating the mentioned GitLab and Cisco vulnerabilities, as CISA has confirmed active exploitation. Staying informed about CISA's KEV catalog is crucial for proactive threat management and understanding the most pressing security risks.