GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
2026-10-03T07:23:59Z•808be057b1f7bf6c8236dcc1c3f85e83cc4a8bdc5c199ad450a631a209b3ea54
CVE-2026-104286CVE-2026-63688CVE-2026-73570CVE-2026-76504CVE-2026-86950AI platform abuseAndroid securityApple CoreGraphicsCISA KEVCisco SD-WANCitrix NetScalerDell CSMFortinet FortiMailKubernetesRMM abuseWordPress malwareZimbraactive exploitationarbitrary file writeauthentication bypasscloud C2command injectioncritical vulnerabilitiesespionagephishingransomwareremote code executionunauthenticated accessweb shellszero-day
What happened
The feed highlights multiple active and critical cybersecurity threats, including unauthenticated remote compromise of Dell Container Storage Modules, FortiMail arbitrary file writes, Cisco SD-WAN Manager authentication bypass, Zimbra command injection, Citrix NetScaler exploitation, malware delivery through abused RMM and AI platforms, espionage activity using Outlook and OneDrive for command and control, and persistent WordPress backdoors. Several vulnerabilities are reportedly exploited in the wild or listed in CISA's KEV catalog, creating urgent patching and mitigation priorities.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 808be057b1f7bf6c8236dcc1c3f85e83cc4a8bdc5c199ad450a631a209b3ea54
- Enrichment time
- 2026-10-03T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.