Event Monitor Cyber
EM-20261029-FTDW VulnerabilityHigh severity

GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

CVE-2026-97229 · GitLab Community Edition and Enterprise Edition

0 hours from first report to confirmed exploitation.

Status
Confirmed

Since : CISA added it to Known Exploited Vulnerabilities.

First Signal
Oct 29 12:00 UTCC1 CISA Known Exploited Vulnerabilities
Page Born
Oct 29 12:00 UTCsecond source joined
Last Signal
Oct 30 07:27 UTC5 days before snapshot
Sources
32 official · 1 research, news or crowd
Open For
6 daysso far

Life Of This Page

  1. 1
    Born
    A second, independent source names it.
  2. 2
    Developing
    New signals join; severity can move.
  3. 3
    Confirmed · Now
    CISA KEV lists it, or exploitation in the wild is reported.
  4. 4
    Resolved
    Not yet
    Past the fix deadline and 14 days with no new signal.
  5. 5
    Archived
    Not yet
    30 days after resolved. Read only; the link keeps working. Reopens if it comes back.

The address and ID never change. A correction is logged, never overwritten. If two pages turn out to be one incident, the later one points to the earlier.

Vulnerability Lifecycle

  1. Disclosed: reached
    Oct 13 02:17 UTC
    C6 NVD published
  2. Scored: reached
    Oct 13 02:17 UTC
    CVSS 10 · EPSS 27.7%
  3. Exploited: reached
    Oct 29 12:00 UTC
    C1 CISA KEV, fix by 2026-11-01
  4. Advisories: reached
    Oct 29 12:00 UTC
    1 government and CERT sources
  5. Vendor Response: not yet
    Not yet
    None in sources yet
  6. Resolved: not yet
    Not yet
    When fixed: KEV deadline 2026-11-01, then 14 quiet days

Timeline

06:0012:0018:00Oct 3006:0012:0018:00BornC1 CISA Known Exploited VulnerabilitC2 CISA Cybersecurity AdvisoriesC130 The Hacker News

Point at a mark to read it. Squares are signals, colored by severity; every one is also listed under Signals.

Signals

  1. CISA Add Actively Exploited GitLab RCE and Ci co Firewall DoS Flaw to KEV (opens source in a new tab) The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitati… Med severityResearch & NewsC130 The Hacker News
  2. CISA Add Two Known Exploited Vulnerabilitie to Catalog (opens source in a new tab) CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or W… High severityGovernmentC2 CISA Cybersecurity Advisories
  3. CVE-2026-97229 added to KEV: GitLab Community Edition and Enterpri e Edition Integer Overflow or Wraparound Vulnerability (opens source in a new tab) GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regul… High severityExploited ListC1 CISA Known Exploited Vulnerabilities