GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
2026-10-02T19:23:58Z•108ffbfbad886da4a4490fda03b3c262bf2288a7058f98106402957ee7bcc30c
CVE-2026-104286CVE-2026-63688CVE-2026-73570CVE-2026-76504CVE-2026-86950AI securityC2CISA KEVCisco SD-WAN ManagerDell CSMFortinet FortiMailGitLabKubernetesRMM abuseZimbraactive exploitationarbitrary file writeauthentication bypasscommand injectioncredential theftcritical vulnerabilitiesespionagemalwarephishingransomwareremote code executionsupply chain securityunauthenticated accessweb shellszero-day
What happened
The document is a cybersecurity news feed covering critical vulnerabilities, active exploitation, malware campaigns, ransomware activity, supply-chain and AI security issues, and defensive technology updates. Notable items include actively exploited FortiMail and Cisco SD-WAN Manager flaws, critical Dell Container Storage Modules vulnerabilities enabling unauthenticated administrative access and root on Kubernetes nodes, Zimbra command injection used for web shells, and a GitLab AI Gateway flaw allowing command execution on self-hosted deployments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 108ffbfbad886da4a4490fda03b3c262bf2288a7058f98106402957ee7bcc30c
- Enrichment time
- 2026-10-02T19:23:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.