CISA added eight exploited flaws to KEV this week: PHP, Adobe Commerce, Brotli, the Linux kernel, VMware ESX, GitLab and Cisco ASA/FTD. Three are due this weekend.
GitLab fixed CVE-2026-97229, a CVSS 10.0 flaw that may allow unauthenticated code execution on self-managed servers. Upgrade to 19.4.2, 19.3.5 or 19.2.8.
