The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that both flaws are already being exploited in attacks.
CVE-2026-76418 affects Cisco Secure Firewall ASA Software and Cisco Secure FTD Software. The vulnerability allows an unauthenticated attacker to restart affected devices, resulting in a denial-of-service condition that disrupts network security controls.
The second flaw, CVE-2026-97229, resides in GitLab. It is an integer overflow vulnerability caused by insufficient validation of regular expressions within CI/CD pipeline configurations. Successful exploitation permits remote attackers to execute arbitrary code on the GitLab server without requiring authentication.
CISA emphasized that the GitLab vulnerability originates from an integer overflow issue in the Ruby/Onigmo dependency. Because of this shared component, the agency warned that other products relying on the same library could also be affected and require investigation.
Security teams are advised to review the official CISA KEV catalog and apply available patches or mitigations without delay to reduce exposure to ongoing exploitation attempts.
