According to The Hacker News, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws—one affecting GitLab software and another affecting Cisco firewall products—to its Known Exploited Vulnerabilities (KEV) list, citing evidence of active exploitation.
The GitLab vulnerability involves an integer overflow or wraparound issue present in both GitLab Community Edition and Enterprise editions. The CVSS score for this flaw is listed as 10.0. No further technical details about the nature of the exploit or affected components are provided in the summary.
A separate vulnerability affecting Cisco firewall products has also been included in the KEV list. Details regarding the specific characteristics, scope, or version ranges of the Cisco flaw are not specified in the provided information. CISA’s addition reflects confirmed evidence that these vulnerabilities have been used by threat actors in active attacks.
Including these flaws in the KEV registry signals that they meet CISA’s criteria for known exploitation and encourages organizations to prioritize assessment, mitigation, or patching where applicable. The update was made on Thursday, October 10, 2026.
