GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
2026-10-03T01:24:00Z•83ce525bb1f64ba4d3aaaaf5d3c0b7dde48b76b141e069c1ac48cf7384c1919e
CVE-2026-104286CVE-2026-63688CVE-2026-73570CVE-2026-76504CVE-2026-86950AI security risks בC2CISA KEVChina-nexusCisco SD-WANCitrix NetScalerClickFixDell CSMFortiMailKubernetesRMM abuseZimbraactive exploitationarbitrary file writeauthentication bypassbackdoorcommand injectioncritical vulnerabilitiesespionagephishingransomwareremote code executionunauthenticated accessweb shellzero-day
What happened
The document aggregates cybersecurity news covering actively exploited critical vulnerabilities, ransomware and espionage campaigns, malware persistence, phishing and remote-access abuse, AI platform misuse, data exposure, and major security incidents. The highest-risk items include unauthenticated remote access or code execution in Dell CSM, FortiMail, Cisco SD-WAN Manager, Zimbra, and Citrix NetScaler, as well as active exploitation and substantial cryptocurrency theft. Several entries reference 2026 CVEs, including KEV-listed vulnerabilities and zero-days.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 83ce525bb1f64ba4d3aaaaf5d3c0b7dde48b76b141e069c1ac48cf7384c1919e
- Enrichment time
- 2026-10-03T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.