CISA Adds Two Actively Exploited Vulnerabilities to KEV Catalog
Summary
CISA added GitLab and Cisco Secure Firewall vulnerabilities to its KEV Catalog based on evidence of active exploitation and urged organizations to prioritize risk-based remediation.
Key points
- CISA added CVE-2026-97229, an integer overflow or wraparound vulnerability in GitLab Community Edition and Enterprise Edition.
- CISA added CVE-2026-76418, an unchecked return value to NULL pointer dereference vulnerability in Cisco Secure Firewall ASA and Secure FTD Software.
- CISA says the additions are based on evidence of active exploitation.
- BOD 26-04 requires FCEB agencies to prioritize certain KEV vulnerabilities on publicly exposed assets and sets expectations for checking whether systems were compromised before patching.
- CISA encourages all organizations to use risk-based vulnerability management and prioritize KEV vulnerabilities.
Article Details
- Vulnerability Types
- Integer overflow or wraparound
- Unchecked return value leading to NULL pointer dereference
- Exploitation Status
- active
- Exploit Availability
- unknown
- Patch Status
- unknown
CVE
Vendors
Products
Cisco Secure Firewall ASA SoftwareCVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityCisco Secure FTD SoftwareCVE-2026-76418 Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference VulnerabilityGitLab Community Edition (CE)CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound vulnerability