Critical Remote Code Execution in GitLab (CVE‑2026‑97229) & Cisco Firewall DoS Flaws Added to CISA KEV
What It Is — The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has placed two actively‑exploited flaws on its Known Exploited Vulnerabilities (KEV) list.
- GitLab CE/EE – CVE‑2026‑97229 – An integer overflow/wrap‑around in the GitLab code‑execution path allows unauthenticated attackers to achieve remote code execution (RCE). The vulnerability scores a perfect CVSS 10.0 and has been observed in the wild.
- Cisco ASA/Firepower – (DoS vulnerability, CVE not disclosed in the source) – A flaw in the packet‑processing engine can be triggered to cause a denial‑of‑service condition, disrupting network traffic. CISA confirms active exploitation.
Both flaws affect the latest supported releases of the products; patches have been released by the vendors, but exploitation continues against unpatched installations.
Affected Products – GitLab Community Edition & Enterprise Edition (all supported versions); Cisco ASA and Firepower firewall firmware (specific versions listed in vendor advisories).
Why It Matters for Trust & Control Assurance – These exploits test an organization’s vulnerability‑management control – the ability to discover, prioritize, and remediate critical flaws before attackers can leverage them. Effective control mapping provides evidence that satisfies multiple frameworks (e.g., NIST CSF 2.0, ISO 27001).
Recommended Actions –
- Verify patch status for GitLab and Cisco firewall assets against the vendor advisories.
- If patching cannot be completed immediately, apply compensating controls (network segmentation, IDS/IPS signatures, temporary firewall rule changes).
- Update your vulnerability‑management inventory and capture remediation evidence for audit readiness.
Source: The Hacker News – CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV