CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
2026-10-03T14:51:38Z•bbc68549d8a74b4d7d453aae6c0cd7072b121212a5a0993b5e2247eb75755b9f
CVE-2026-102489CVE-2026-104286CVE-2026-76504CVE-2026-86950CVE-2026-90970AI-GatewayAI-agentsAntinoApple-CoreGraphicsCISA-KEVChina-linked-espionageCisco-SD-WANFortinet-FortiMailGitLabKillSecMicrosoft-365-C2SQL-injectionUAT-11587Zammadactively-exploitedpublic-pocransomwareremote-code-executionvulnerabilityzero-day
What happened
Security news roundup covering critical and actively exploited vulnerabilities in GitLab AI Gateway, Zammad, Fortinet FortiMail, Cisco Catalyst SD-WAN Manager, and Apple CoreGraphics, alongside China-linked espionage using the Antino backdoor and Microsoft 365 for command and control, autonomous AI agent reconnaissance and SQL injection activity, and law-enforcement disruption of the KillSec ransomware group. Several vulnerabilities have high exploitation risk due to KEV inclusion, zero-day exploitation, public proof-of-concept availability, or severe remote-code-execution impact.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- bbc68549d8a74b4d7d453aae6c0cd7072b121212a5a0993b5e2247eb75755b9f
- Enrichment time
- 2026-10-03T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.