CISA says max severity GitLab flaw now exploited in the wild

A BleepingComputer security news digest reports active exploitation of multiple critical vulnerabilities, including a maximum-severity GitLab flaw, a Drupal Commerce Core access bypass, Cisco Catalyst SD-WAN authentication bypass CVE-2026-20127, and a Linux privilege-escalation flaw chained with PHP2Shell attacks. It also covers major supply-chain and third-party compromises, cryptocurrency theft, malware campaigns targeting GPU infrastructure, malicious browser extensions, and data exposure affecting Japan Airlines customers.