Skip to content

Back to the catalog

cisa.govadvisory

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA alert of 29 October 2026 adding two vulnerabilities to the Known Exploited Vulnerabilities catalog on evidence of active exploitation: CVE-2026-97229, an integer overflow in GitLab CE/EE, and CVE-2026-76418, a NULL pointer dereference from an unchecked return value in Cisco Secure Firewall ASA and FTD. It restates BOD 26-04 remediation duties for federal civilian agencies and links the KEV nomination form.

TL;DR CISA adds a GitLab integer overflow and a Cisco ASA/FTD NULL pointer dereference to the KEV catalog as actively exploited.
Open original ↗

Organisations named here

  • BOD 26-04
  • CISA
  • NULL pointer dereference

CVEs named here

  • CVE-2026-97229
  • CVE-2026-76418

Technologies named here

  • Known Exploited Vulnerabilities Catalog
  • GitLab Community Edition
  • Binding Operational Directive 26-04
  • GitLab Enterprise Edition
  • CISA KEV
  • GitLab
  • Cisco Secure Firewall ASA
  • Cisco Secure Firewall ASA Software (CVE-2026-76418, Unchecked Return Value to NULL Pointer Dereference)
  • Cisco Secure FTD
  • Cisco Secure FTD Software (CVE-2026-76418, Unchecked Return Value to NULL Pointer Dereference)
  • KEV Nomination Form

Techniques named here

  • Risk-based vulnerability management
  • Integer Overflow
  • Compromise check before patching

Related in Threat Intel