🤖 CVE-2026-97229 (CVSS 10.0): unauthenticated RCE in GitLab CE/EE via a crafted regex in CI/CD configuration (insufficient regex validation). Fixed in 19.2.8, 19.3.5, 19.4.2. Actively exploited — added to CISA KEV Oct 29, alongside a Cisco Secure Firewall DoS (CVE-2026-76418).
🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-97229
#CVE #Exploit #CyberSec #GitLab