VulnRadar

Data against noise.

Built with NaN
Page generated: 06 Nov 2026, 03:48 UTC
← Dashboard

CVE-2026-97229

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially craf…

Read full description
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.
CVSS 10.0 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
6.5/10
REALITY · THREAT PRIORITY
8.8/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 10: +1.50
  • Fresh EPSS: 65.22%: +0.33

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 39 documents and public datasets.

Hype components

Headline sample (25%)
20/100
Press, 30 days (60%)
100/100
Grounded branding (15%)
0/100
HYPE TOTAL65/100

Sources and documents

Security Affairs
Press · 01 Nov 2026, 13:22 · Security Affairs newsletter Round 602 by Pierluigi Paganini – INTERNATIONAL EDITION
https://tech-insider.org/
Press · 31 Oct 2026, 03:24 · GitLab CVE-2026-97229: CVSS 10.0 Joins CISA KEV [2026] - https://tech-insider.org/
Security Affairs
Press · 30 Oct 2026, 20:25 · U.S. CISA adds GitLab and Cisco flaws to its Known Exploited Vulnerabilities catalog
BleepingComputer
Press · 30 Oct 2026, 13:00 · CISA says max severity GitLab flaw now exploited in the wild - BleepingComputer
GBHackers News
Press · 30 Oct 2026, 12:24 · CISA Confirms Active Exploitation of GitLab Vulnerability CVE-2026-97229 - GBHackers News
See all 39 source documents
OrcaRouter
Press · 30 Oct 2026, 11:04 · CVE-2026-97229: GitLab 10.0 – das man in GitLab nicht patchen kann - OrcaRouter
SecurityWeek
Press · 30 Oct 2026, 09:37 · Max-Severity GitLab Vulnerability Exploited Against Alpine Linux - SecurityWeek
SecurityWeek
Press · 30 Oct 2026, 09:32 · Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
SecurityWeek
Press · 30 Oct 2026, 09:32 · Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
The Hacker News
Press · 30 Oct 2026, 07:27 · CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV
The Hacker News
Press · 30 Oct 2026, 07:27 · CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV - The Hacker News
The Hacker News
Press · 29 Oct 2026, 09:05 · Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open
The Hacker News
Press · 29 Oct 2026, 09:05 · Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open - The Hacker News
Hacker News
Press · 28 Oct 2026, 23:45 · GitLab Security Incident: Attempted Exploitation of CVE-2026-97229
The Hacker News
Press · 23 Oct 2026, 17:54 · Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws - The Hacker News
BleepingComputer
Press · 22 Oct 2026, 11:41 · GitLab warns of new max severity code execution vulnerability - BleepingComputer
"CVE-2026-97229" - Google News
Press · 22 Oct 2026, 07:21 · GitLab CVE-2026-110264 vulnerability, CVSS 10 in 12 years of releases - Pasquale Pillitteri
The Hacker News
Press · 21 Oct 2026, 07:00 · Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases - The Hacker News
Rapid7 Cybersecurity Blog
Press · 16 Oct 2026, 13:31 · Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
Rapid7
Press · 16 Oct 2026, 07:00 · Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229) - Rapid7
CyberSecurityNews
Press · 16 Oct 2026, 07:00 · PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229) - CyberSecurityNews
Cyber Daily
Press · 15 Oct 2026, 07:00 · Patch now! GitLab publishes fixes for perfect-10 vulnerability CVE-2026-97229 - Cyber Daily
Security Boulevard
Press · 15 Oct 2026, 07:00 · GitLab Remote Code Execution Vulnerability (CVE-2026-97229) Notice - Security Boulevard
DevOps.com
Press · 14 Oct 2026, 07:00 · GitLab Fixes CVSS 10 Flaw in CI/CD Regex Engine, Plus 23 Other Vulnerabilities - DevOps.com
Rapid7 Cybersecurity Blog
Press · 13 Oct 2026, 11:29 · CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
"CVE-2026-97229" - Google News
Press · 13 Oct 2026, 07:00 · Warning: Critical vulnerability in GitLab CE/EE, Patch Immediately! - CCB Belgium
Rapid7
Press · 13 Oct 2026, 07:00 · CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab - Rapid7
Help Net Security
Press · 13 Oct 2026, 07:00 · GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) - Help Net Security
The Hacker News
Press · 13 Oct 2026, 07:00 · GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code - The Hacker News
Security Affairs
Press · 13 Oct 2026, 07:00 · GitLab Patches Max-Severity Vulnerability CVE-2026-97229 - Security Affairs
SOCRadar
Press · 13 Oct 2026, 07:00 · CVE-2026-97229: Critical GitLab RCE - SOCRadar
SOC Prime
Press · 13 Oct 2026, 07:00 · CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Execution - SOC Prime
CyberSecurityNews
Press · 12 Oct 2026, 07:00 · Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers - CyberSecurityNews
Cyber Kendra
Press · 12 Oct 2026, 07:00 · GitLab Patches Critical CVE-2026-97229 RCE Flaw - Cyber Kendra
BleepingComputer
Press · 12 Oct 2026, 07:00 · GitLab warns of max severity code execution vulnerability - BleepingComputer
Cybersecurity Dive
Press · 12 Oct 2026, 07:00 · GitLab fixes critical vulnerability that exposed software environments to sabotage - Cybersecurity Dive
SOC Prime
Press · 05 Oct 2026, 07:00 · CVE-2026-88779: Citrix NetScaler Zero-Day Exploited Against SAML Deployments - SOC Prime
"CVE-2026-97229" - Google News
Press · 24 Aug 2026, 07:00 · Technical Analysis of Microsoft SharePoint Remote Code Execution vulnerability CVE-2026-63520 - Rapid7
"CVE-2026-97229" - Google News
Press · 07 Aug 2026, 07:00 · Rapid7 Analysis of CVE-2026-63077, an unauthenticated Remote Code Execution vulnerability in JetBrains TeamCity - Rapid7

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

024681002 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 6.5Reality 8.604 Nov 2026 · HIGH ATTENTION + OBSERVED EXPLOITATIONHype 6.5Reality 8.8Nov 2Nov 4

━ Hype Score (Perceived)  ━ Reality threat priority. Definition changes are not new attacks.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
jburgess-r7/CVE-2026-97229-PoC6511Python19 Oct 2026, 08:46
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 10; EPSS 65.2%
Attention, last 30 days
35 distinct story titles; 36 press documents; 6 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 14:00:33.749271+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
07 Aug 2026, 07:00
Published
13 Oct 2026, 01:05
Added to the CISA KEV catalog
29 Oct 2026, 00:00
Latest press mention
01 Nov 2026, 13:22
Score calculated
05 Nov 2026, 14:00
PoCs on GitHub
1 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar