{"metadata": {"vulnerability": "CVE-2026-97229", "count": 108, "kinds": {"milestone": 6, "sighting": 89, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0414", "record": "NCSC-2026-0414", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-24T10:04:47.421Z", "date_only": false, "value": "2026-09-24T10:04:47.421Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-97229", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1294", "record": "CERTFR-2026-AVI-1294", "field": "last_revision_date"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": true, "value": "2026-10-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1294", "record": "CERTFR-2026-AVI-1294", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1294", "record": "CERTFR-2026-AVI-1294", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-12T01:22:06Z", "date_only": false, "value": "2026-10-12T01:22:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-23", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "3df93a8e-1d6d-4451-83c4-3d530848f262", "url": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-ce/ee-23"}, {"timestamp": "2026-10-12T08:19:29.357Z", "date_only": false, "value": "2026-10-12T08:19:29.357662Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxo3houa4p2w", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "98b549f3-694e-4449-9c0e-3866ab33fa9c", "content": "A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.\n\n#GitLab #CVE202697229 #ArbitraryCodeExecution #CICD #DevSecOps #PatchNow #CyberSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxo3houa4p2w"}, {"timestamp": "2026-10-12T13:02:57.328Z", "date_only": false, "value": "2026-10-12T13:02:57.328574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/whatsnew.fyi/post/3mxolckjrfl2l", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "934a9089-0658-4b6f-bbba-ee7e505c1570", "content": "GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8\n\nFixed an integer overflow in the CI/CD regular expression compiler that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in CI/CD configuration (CVE-2026-97229)", "url": "https://bsky.app/profile/whatsnew.fyi/post/3mxolckjrfl2l"}, {"timestamp": "2026-10-12T13:37:17.319Z", "date_only": false, "value": "2026-10-12T13:37:17.319206Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117428173567027903", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "01c02ca0-8db2-492d-b70b-8be822c3ca8d", "content": "GitLab security advisory. The standout CVE is a 10.0 critical CVE-2026-97229 - Integer Overflow issue in CI/CD Regular Expression Compiler impacts GitLab CE/EE\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/\n#gitlab #cve", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117428173567027903"}, {"timestamp": "2026-10-12T13:39:19.456Z", "date_only": false, "value": "2026-10-12T13:39:19.456181Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/clinux.fr/post/3mxondufm6c22", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a9d0ea5e-8c24-43cf-bead-e821bde9587c", "content": "Sale temps pour les #gitlab  RCE non authentifi\u00e9e .... CVE-2026-97229\nGo patch !", "url": "https://bsky.app/profile/clinux.fr/post/3mxondufm6c22"}, {"timestamp": "2026-10-12T14:10:04.185Z", "date_only": false, "value": "2026-10-12T14:10:04.185386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxop2kkgfs2i", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "345a9163-3b6b-4919-b469-3bf02040b76d", "content": "GitLab Patches CVE-2026-97229: Maximum-Severity RCE in CI/CD Regex Compiler", "url": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mxop2kkgfs2i"}, {"timestamp": "2026-10-12T14:22:41.959Z", "date_only": false, "value": "2026-10-12T14:22:41.959701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mxopr5krtl2p", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "15930030-c2ec-4d1c-a4ed-50163f72cc40", "content": "GitLab CVE-2026-97229 lets attackers run code without login\u2014patch your servers now. #GitLab #CVE2026-97229 #Security #CI/CD #Vulnerability #CodeExecution https://thedailytechfeed.com/critical-gitlab-flaw-opens-door-to-remote-code-execution/", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mxopr5krtl2p"}, {"timestamp": "2026-10-12T16:01:37.605Z", "date_only": false, "value": "2026-10-12T16:01:37.605437Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxovc2ouuw25", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "186c7af0-82fc-405a-94da-f93a3205e2d0", "content": "~Certeu~\nUnauthenticated RCE affects self-managed GitLab; upgrade to 19.4.2, 19.3.4, or 19.2.8.\n-\nIOCs: CVE-2026-97229, CVE-2026-92883, CVE-2026-16301\n-\n#CVE-2026-97229 #GitLab #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxovc2ouuw25"}, {"timestamp": "2026-10-12T17:24:18.909Z", "date_only": false, "value": "2026-10-12T17:24:18.909192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxozvvrvmv2m", "record": "cve-2026-97229", "field": "creation_timestamp", "uuid": "b83ece1b-25cd-4f8b-a7af-6cfa1e53579c", "content": "[some-subscribed-rss] New Post: GitLab Patches Critical Remote Code Execution Flaw, by Jeremy https://noted.lol/gitlab-critical-rce-cve-2026-97229/", "url": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxozvvrvmv2m"}, {"timestamp": "2026-10-12T17:49:12.023Z", "date_only": false, "value": "2026-10-12T17:49:12.023699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxp3cg7ikd2l", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "6981e47c-6d98-4abe-9a03-8a4857ecc5bc", "content": "\ud83e\udd16 CVE-2026-97229 (CVSS 10.0): unauthenticated RCE in GitLab's CI/CD regex compiler via a crafted regex in pipeline config. Fixed in 19.2.8, 19.3.4, 19.4.2.\nhttps://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxp3cg7ikd2l"}, {"timestamp": "2026-10-12T17:56:59.728Z", "date_only": false, "value": "2026-10-12T17:56:59.728961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redsiege.com/post/3mxp3qcwjfk2z", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "494a74b5-97e3-4f23-b4a6-e253a3e0ec85", "content": "GitLab is urging users to patch a critical vulnerability (CVE-2026-97229) that could allow unauthenticated attackers to remotely execute code. Fixes are available for affected versions.\n\nvia @bleepingcomputer.com \n\nwww.bleepingcomputer.com/news/securit...", "url": "https://bsky.app/profile/redsiege.com/post/3mxp3qcwjfk2z"}, {"timestamp": "2026-10-12T18:00:00Z", "date_only": false, "value": "2026-10-12T18:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "6d4e12ce-e439-438b-bb68-a02911f91b2e", "url": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20261013"}, {"timestamp": "2026-10-12T18:15:47.489Z", "date_only": false, "value": "2026-10-12T18:15:47.489416Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rx4vps2h", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4c60ebff-faab-4a5b-b5f0-6bb77f3dfa0b", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-102255 \u00b7 10 people\n2. CVE-2026-85097 \u00b7 8 people\n3. CVE-2026-97229 \u00b7 7 people\n4. CVE-2026-78357 \u00b7 5 people\n5. CVE-2026-93582 \u00b7 5 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rx4vps2h"}, {"timestamp": "2026-10-12T18:15:48.842Z", "date_only": false, "value": "2026-10-12T18:15:48.842864Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rxbwu22h", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "348ebf6b-f806-4d0a-bf56-28d2bc754cc6", "content": "3. CVE-2026-97229 \u00b7 7 people\n\nNo published details yet (the CVE may still be reserved).", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxp4rxbwu22h"}, {"timestamp": "2026-10-12T19:30:21.892Z", "date_only": false, "value": "2026-10-12T19:30:21.892694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3mxpaxcztdy2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "cb894aba-2e18-425f-bcb4-7996f676b595", "content": "Toutes les instances GitLab de nos clients sont \u00e0 jour version 19.4.2\n\nCette mise \u00e0 jour critique vient corriger 24 vuln\u00e9rabilit\u00e9s de s\u00e9curit\u00e9, dont une faille critique not\u00e9e CVSS 10.0 (CVE-2026-97229)\n\nEn savoir plus sur notre offre, contactez nous \ud83d\udc47", "url": "https://bsky.app/profile/bearstech.com/post/3mxpaxcztdy2n"}, {"timestamp": "2026-10-12T19:30:27.010Z", "date_only": false, "value": "2026-10-12T19:30:27.010161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3mxpaxhyztb2w", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4d18e64c-8994-4b58-914a-38e52415b718", "content": "En savoir plus sur cette mise \u00e0 jour \ud83d\udc49 docs.gitlab.com/rele...\n\nEn savoir plus sur la CVE-2026-97229 not\u00e9e CVSS 10.0 \ud83d\udc49 gitlab-com.gitlab.io...\n\nTak @joaxcar.bsky.social \ud83d\udc49 hackerone.com/joaxcar", "url": "https://bsky.app/profile/bearstech.com/post/3mxpaxhyztb2w"}, {"timestamp": "2026-10-12T20:24:28.169Z", "date_only": false, "value": "2026-10-12T20:24:28.169373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxpdy2btmc2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a4cfb5b4-817c-4626-a58c-88713c514259", "content": "GitLab patched CVE-2026-97229, a critical integer overflow in its CI/CD regular expression compiler that could let unauthenticated attackers execute code. Self-managed installations should upgrade; GitLab.com is patched.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxpdy2btmc2n"}, {"timestamp": "2026-10-12T22:33:04.719Z", "date_only": false, "value": "2026-10-12T22:33:04.719324Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cloud/statuses/117429196639727551", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "c8073892-7492-40bf-8f3f-1dd29306f12b", "content": "\ud83e\udd16 CVE-2026-97229 (CVSS 10.0): unauthenticated RCE in GitLab's CI/CD regex compiler \u2014 integer overflow / insufficient regex validation, triggered by a crafted regex in a pipeline config. Fixed in 19.2.8, 19.3.4, 19.4.2. Self-managed instances should patch now.\ud83d\udd17 https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/#CVE #RCE #GitLab #CyberSec", "url": "https://infosec.exchange/users/cloud/statuses/117429196639727551"}, {"timestamp": "2026-10-13T00:24:47Z", "date_only": false, "value": "2026-10-13T00:24:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-vulnerability-gitlab-ceee-patch-immediately", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "d5de1e88-c3bf-4c39-9bba-92b58824bb31", "url": "https://ccb.belgium.be/advisories/warning-critical-vulnerability-gitlab-ceee-patch-immediately"}, {"timestamp": "2026-10-13T01:05:24Z", "date_only": false, "value": "2026-10-13T01:05:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-10-13/GitLab-advarer-om-kritisk-saarbarhed", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "0a6baa95-b2e7-4d8a-98d5-ba98da03f813", "url": "https://www.cert.dk/news/2026-10-13/GitLab-advarer-om-kritisk-saarbarhed"}, {"timestamp": "2026-10-13T01:05:46.166Z", "date_only": false, "value": "2026-10-13T01:05:46.166Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-97229", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T01:05:46.166Z", "date_only": false, "value": "2026-10-13T01:05:46.166Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-97229", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T01:45:31.887Z", "date_only": false, "value": "2026-10-13T01:45:31.887793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxpvw5f26d2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "22b9b441-c99a-4b32-a391-0a0c5ac6497b", "content": "\u26a0\ufe0f PATCH NOW\n\nA crafted regex in a CI/CD config can run code on a self-managed GitLab server. No login required.\n\nGitLab CVE-2026-97229 is a CVSS 10 unauthenticated RCE. GitLab.com is already patched; self-hosted is the exposure.\n\nPatch to 19.4.2, 19.3.5, or 19.2.8 now.", "url": "https://bsky.app/profile/suriq.io/post/3mxpvw5f26d2n"}, {"timestamp": "2026-10-13T02:00:04.658Z", "date_only": false, "value": "2026-10-13T02:00:04.658761Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpwq6klok2l", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "077a0ac9-080d-4d90-80d2-77afc33babae", "content": "CVE-2026-97229 - gitlab\nAll supported versions of GitLab Community and Enterprise Edition can be tricked by a specially crafted regular expression in a CI/CD configuration. An attacker without any login could cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitlab #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxpwq6klok2l"}, {"timestamp": "2026-10-13T02:00:49.273Z", "date_only": false, "value": "2026-10-13T02:00:49.273654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3mxpwrj5qvm2c", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a77ccffc-fc6e-43df-84ab-e4e2136827e0", "content": "SANS Stormcast Tuesday, October 13th, 2026: GitLab CI/CD RCE (CVE-2026-97229); Let\u2019s Encrypt 64-Day Certificates; Midnight Mimosa Pre-Installed Android Malware; Progress MarkLogic Patches\n https://isc.sans.edu/podcastdetail/10134", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3mxpwrj5qvm2c"}, {"timestamp": "2026-10-13T02:00:54.492Z", "date_only": false, "value": "2026-10-13T02:00:54.492766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxpwroal5u2t", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a29a7429-0007-42cf-a35f-0d1cc0a86c98", "content": "\ud83e\udd16 CVE-2026-97229: unauthenticated RCE in GitLab's CI/CD regex compiler via an integer overflow. Patch self-managed instances (19.2.8/19.3.4/19.4.2).\nhttps://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxpwroal5u2t"}, {"timestamp": "2026-10-13T02:12:46.708Z", "date_only": false, "value": "2026-10-13T02:12:46.708369Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117431177458331377", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "bc851928-158f-436c-a6f0-a2681a6d54d5", "content": "CVE-2026-97229 Integer Overflow or Wraparound in GitLab GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.\nhttps://www.cve.org/CVERecord?id=CVE-2026-97229https://gitlab.com/gitlab-org/gitlab/-/work_items/630686https://hackerone.com/reports/4055749https://hackerone.com/reports/4058589https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/#gitlab #GitLab#CVE_2026_97229#bot", "url": "https://infosec.exchange/users/cve/statuses/117431177458331377"}, {"timestamp": "2026-10-13T02:17:00Z", "date_only": false, "value": "2026-10-13T02:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9HJ5-R43H-H3XG", "record": "GHSA-9HJ5-R43H-H3XG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T02:17:00.840Z", "date_only": false, "value": "2026-10-13T02:17:00.840", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97229", "record": "FKIE_CVE-2026-97229", "field": "published"}, {"timestamp": "2026-10-13T02:39:58Z", "date_only": false, "value": "2026-10-13T02:39:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0414", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "cc99d51e-3cae-4c14-aafd-4918f4f3023f", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0414"}, {"timestamp": "2026-10-13T02:50:00Z", "date_only": false, "value": "2026-10-13T02:50:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/10/gitlab-rattar-kritisk-sarbarhet.html", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "1bdfd24a-052f-48ff-9537-664a547b6df3", "url": "https://www.cert.se/2026/10/gitlab-rattar-kritisk-sarbarhet.html"}, {"timestamp": "2026-10-13T03:30:36Z", "date_only": false, "value": "2026-10-13T03:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9HJ5-R43H-H3XG", "record": "GHSA-9HJ5-R43H-H3XG", "field": "published"}, {"timestamp": "2026-10-13T03:30:36Z", "date_only": false, "value": "2026-10-13T03:30:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9HJ5-R43H-H3XG", "record": "GHSA-9HJ5-R43H-H3XG", "field": "modified"}, {"timestamp": "2026-10-13T03:48:05.255Z", "date_only": false, "value": "2026-10-13T03:48:05.255718Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxq4rc7hek2k", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "72e29844-7ba8-48bb-978f-a2a538a89543", "content": "\ud83d\udd34 CVE-2026-97229 - Critical (10)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxq4rc7hek2k"}, {"timestamp": "2026-10-13T03:49:12.946Z", "date_only": false, "value": "2026-10-13T03:49:12.946519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3hjo3uj35haga", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "88a67b2d-c354-449f-ad7f-ea066ba291fd", "content": "CVE-2026-97229 - Integer Overflow or Wraparound in GitLab\nCVE ID : CVE-2026-97229\n \n Published : Oct. 13, 2026, 2:17 a.m. | 13\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3hjo3uj35haga"}, {"timestamp": "2026-10-13T04:07:59Z", "date_only": false, "value": "2026-10-13T04:07:59.000547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxq5uvjn442o", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "9b925116-375f-4d33-bebd-c8301cdc5737", "content": "\ud83d\udea8 CVE-2026-97229 \u2014 CVSS 10 CRITICAL\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-97229\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxq5uvjn442o"}, {"timestamp": "2026-10-13T05:53:48.911Z", "date_only": false, "value": "2026-10-13T05:53:48.911080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxqds4x7b42f", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4aae626d-a506-4487-9cbc-2d87a372dcfd", "content": "GitLab\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304c\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u53ef\u80fd\u306b\n\nGitLab\u306f\u3001\u8a8d\u8a3c\u306a\u3057\u306e\u653b\u6483\u8005\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u3001\u7dca\u6025\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002CVE\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-97229\u300d\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u304a\u308a\u3001CVSS\u30b9\u30b3\u30a2\u306f\u6700\u9ad8\u5024\u306e10.0\u3068\u8a55\u4fa1\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxqds4x7b42f"}, {"timestamp": "2026-10-13T06:43:41Z", "date_only": false, "value": "2026-10-13T06:43:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-gitlab-ce-en-ee-update-nu", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "670a34ed-9edd-47ab-a6df-0c976e37165b", "url": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-gitlab-ce-en-ee-update-nu"}, {"timestamp": "2026-10-13T08:10:36.982Z", "date_only": false, "value": "2026-10-13T08:10:36.982444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mxqlgpevey2l", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "992bcf8e-43c6-4eab-a86d-604077f2351a", "content": "COGNOSCERE Tech Brief \u2014 2026-10-13\n\nGitLab shipped emergency patches Sunday for CVE-2026-97229, a CVSS 10.0 unauthen\n\nhttps://youtube.com/watch?v=srOSDbJj2K4\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3mxqlgpevey2l"}, {"timestamp": "2026-10-13T08:22:40.866Z", "date_only": false, "value": "2026-10-13T08:22:40.866071Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "8731249e-42c0-443a-8e5d-38af11de5a9f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 79 interactions\nCVE-2026-102255: 21 interactions\nCVE-2026-107406: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-97229: 14 interactions\nCVE-2026-92392: 7 interactions\nCVE-2025-41450: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26"}, {"timestamp": "2026-10-13T09:21:30.002Z", "date_only": false, "value": "2026-10-13T09:21:30.002624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxqpfiqwhi2g", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a2589fc7-d5ef-4f39-85ea-27b38e241a21", "content": "GitLab CVE-2026-97229 max-severity RCE lets unauthenticated attackers run code via a crafted CI/CD regex. Self-managed 19.2 to 19.4 must upgrade to 19.2.8, 19.3.4 or 19.4.2 now. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mxqpfiqwhi2g"}, {"timestamp": "2026-10-13T09:23:23.572Z", "date_only": false, "value": "2026-10-13T09:23:23.572679Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxqpirzk4y24", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "54b371e7-9986-45a9-9943-46bd25cfd7b5", "content": "GitLab released patches for CVE-2026-97229, a maximum-severity flaw enabling unauthenticated arbitrary code execution via insufficient CI/CD regular expression validation.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxqpirzk4y24"}, {"timestamp": "2026-10-13T09:26:37.099Z", "date_only": false, "value": "2026-10-13T09:26:37.099954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mxqpok2kc22q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "7ad6cdf3-2ea9-4911-967c-9a895c00a1e0", "content": "GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/10/13/g...\n\n#GitLab #vulnerability #cybersecurity", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mxqpok2kc22q"}, {"timestamp": "2026-10-13T09:29:39.768Z", "date_only": false, "value": "2026-10-13T09:29:39.768266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxqpu2qkdt2a", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "30d931a2-74af-46aa-90dd-9033efa94f16", "content": "GitLab released patches for CVE-2026-97229, a maximum-severity flaw enabling unauthenticated arbitrary code execution via insufficient CI/CD regular expression validation.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxqpu2qkdt2a"}, {"timestamp": "2026-10-13T09:29:44.071Z", "date_only": false, "value": "2026-10-13T09:29:44.071128Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mxqpua6fr52n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "92bc099e-1d3b-40c2-990b-e04219efd16d", "content": "GitLab released patches for CVE-2026-97229, a maximum-severity flaw enabling unauthenticated arbitrary code execution via insufficient CI/CD regular expression validation.\n", "url": "https://bsky.app/profile/javascriptbriefly.bsky.social/post/3mxqpua6fr52n"}, {"timestamp": "2026-10-13T09:29:59.492Z", "date_only": false, "value": "2026-10-13T09:29:59.492918Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxqpuooc3z2i", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "41ddd456-7266-403d-99d6-6272683cd489", "content": "GitLab\u306e\u7ba1\u7406\u8005\u306b\u7dca\u6025\u30d1\u30c3\u30c1\u9069\u7528\u3092\u547c\u3073\u304b\u3051\u3001\u91cd\u5927\u306aRCE\u8106\u5f31\u6027\uff08CVE-2026-97229\uff09\n\nGitLab\u306f\u3001\u30bb\u30eb\u30d5\u30de\u30cd\u30fc\u30b8\u30c9\u7248\u306e\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u30e6\u30fc\u30b6\u30fc\u306b\u5bfe\u3057\u3001CI/CD\u306e\u6b63\u898f\u8868\u73fe\u30b3\u30f3\u30d1\u30a4\u30e9\u30fc\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-97229\uff09\u3078\u306e\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304cGitLab\u30b5\u30fc\u30d0\u30fc\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u6050\u308c\u304c\u3042", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mxqpuooc3z2i"}, {"timestamp": "2026-10-13T09:39:58.905Z", "date_only": false, "value": "2026-10-13T09:39:58.905563Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0414", "record": "NCSC-2026-0414", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-13T09:39:58.905Z", "date_only": false, "value": "2026-10-13T09:39:58.905563Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0414", "record": "NCSC-2026-0414", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-13T09:39:58.905Z", "date_only": false, "value": "2026-10-13T09:39:58.905563Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0414", "record": "NCSC-2026-0414", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-13T09:48:44.291Z", "date_only": false, "value": "2026-10-13T09:48:44.291051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mxqqw6b6xq27", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "d7d837cd-cfee-4b9d-affc-c38bcf483afe", "content": "GitLab released urgent security updates on October 12, 2026, to address a critical vulnerability (CVE-2026-97229) allowing arbitrary code execution on servers without authentication. The flaw, with a CVSS score of 10.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mxqqw6b6xq27"}, {"timestamp": "2026-10-13T09:59:39.608Z", "date_only": false, "value": "2026-10-13T09:59:39.608514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxqrjnx6qo2y", "record": "cve-2026-97229", "field": "creation_timestamp", "uuid": "5abba350-5aee-436a-9ada-f15a238df254", "content": "\ud83d\udcf0 GitLab Peringatkan Celah RCE Kritis CVE-2026-97229 dengan Skor CVSS 10.0, Pengguna Diminta Segera Update\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/13/gitlab-cve-2026-97229-celah-rce-kritis-cvss-10/\n\n#cve #cybersecurity #devsecops #gitlab #hacker #keamananSiber #rce #remo", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mxqrjnx6qo2y"}, {"timestamp": "2026-10-13T10:11:55.829Z", "date_only": false, "value": "2026-10-13T10:11:55.829538Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxqs7omhat2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "3be768c9-f6ab-4c37-9cbf-ba5db8298b66", "content": "\ud83e\udd16 CVE-2026-97229 (CVSS 10.0): unauthenticated RCE on GitLab CE/EE via a crafted regex in a CI/CD config. Fixed in 19.4.2/19.3.5/19.2.8.\nhttps://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxqs7omhat2n"}, {"timestamp": "2026-10-13T10:52:50.423Z", "date_only": false, "value": "2026-10-13T10:52:50.423963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxquisjzbk2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "0d2fbeb0-2de6-467e-b99e-b2d60b5a0e14", "content": "GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)\n\nwww.helpnetsecurity.com/2026/10/13/g...\n\n#Kyberturvallisuus #Kyber #Tilannekuva", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mxquisjzbk2n"}, {"timestamp": "2026-10-13T12:04:48.200Z", "date_only": false, "value": "2026-10-13T12:04:48.200501Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mxqyjikl7k2a", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "705ae5a8-bab6-4951-9089-d8ea4096079a", "content": "GitLab patched a maximum-severity flaw (CVE-2026-97229, CVSS 10.0) that allows unauthenticated code execution via a crafted regular expression in CI/CD [\u2026]", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mxqyjikl7k2a"}, {"timestamp": "2026-10-13T13:06:20.803Z", "date_only": false, "value": "2026-10-13T13:06:20.803798Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mxr3xke2f52u", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "7f9ef086-bb92-423a-8f96-af7ca26a9f7f", "content": "CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab\nwww.rapid7.com/blog/post/et...", "url": "https://bsky.app/profile/neroqc.bsky.social/post/3mxr3xke2f52u"}, {"timestamp": "2026-10-13T13:08:18.980Z", "date_only": false, "value": "2026-10-13T13:08:18.980863Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mxr432xfzp2v", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "fd323d7f-9af1-400c-a284-bab02726f6fc", "content": "GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)\nwww.helpnetsecurity.com/202...", "url": "https://bsky.app/profile/neroqc.bsky.social/post/3mxr432xfzp2v"}, {"timestamp": "2026-10-13T13:24:37.017Z", "date_only": false, "value": "2026-10-13T13:24:37.017006Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117433819237800398", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "f24c36a3-9e6c-4655-9e4b-824aa2b3fd7e", "content": "\ud83d\udea8 A lot of offensive activities were identified targeting GitLab (CVE-2026-97229) https://vuldb.com/vuln/417461/cti", "url": "https://infosec.exchange/users/vuldb/statuses/117433819237800398"}, {"timestamp": "2026-10-13T13:49:46.656Z", "date_only": false, "value": "2026-10-13T13:49:46.656569Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117433918177749050", "record": "cve-2026-97229", "field": "creation_timestamp", "uuid": "1e934b21-d42a-469d-b0e4-a6a4b922c06d", "content": "CVE-2026-97229: Critical GitLab RCE Flaw Enables Unauthenticated Code Execution#GitLab #CVE_2026_97229 https://socprime.com/blog/cve-2026-97229-critical-gitlab-rce-vulnerability/", "url": "https://infosec.exchange/users/threatcodex/statuses/117433918177749050"}, {"timestamp": "2026-10-13T14:37:12.483Z", "date_only": false, "value": "2026-10-13T14:37:12.483419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/robcampbell.bsky.social/post/3mxrazzlsn22e", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "58060238-7ff2-4c0d-9ef8-d633740b441d", "content": "GitLab patched CVE-2026-97229, a critical flaw that lets an unauthenticated attacker run code on self-managed instances through a crafted CI/CD regex. Upgrade now.\n\ndocs.gitlab.com/releases/pat...\n\n#Cybersecurity #GitLab", "url": "https://bsky.app/profile/robcampbell.bsky.social/post/3mxrazzlsn22e"}, {"timestamp": "2026-10-13T15:12:28.247Z", "date_only": false, "value": "2026-10-13T15:12:28.247966Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxrcz2zk322w", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "21a1b046-ddda-4d2e-a3f7-5ba3744c6f3a", "content": "GitLab patched CVE-2026-97229, a CVSS 10.0 flaw that could let unauthenticated users execute code on a server through a crafted regular expression in CI/CD configuration.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxrcz2zk322w"}, {"timestamp": "2026-10-13T15:19:53.427Z", "date_only": false, "value": "2026-10-13T15:19:53.427604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mxrdge6imp2j", "record": "cve-2026-97229", "field": "creation_timestamp", "uuid": "7cc2d3cf-f7c4-470d-8364-f446d2b8a9bb", "content": "Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler...\n\n\ud83d\udd17 https://www.rapid7.com/blog/post/etr-cve-2026-97229-critical-unauthenticated-remote-code-execution-in-gitlab", "url": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mxrdge6imp2j"}, {"timestamp": "2026-10-13T15:33:08.982Z", "date_only": false, "value": "2026-10-13T15:33:08.982159Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-99e29752-898ffc3321206ba3", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "1b57eab2-e2d3-4be4-9662-a87a9d610c4c", "content": "GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without logging in. The flaw affects Community Edition (CE) and [\u2026]GitLab Patches Max-Severity Vulnerability CVE-2026-97229", "url": "https://poliverso.org/objects/0477a01e-99e29752-898ffc3321206ba3"}, {"timestamp": "2026-10-13T15:33:17.954Z", "date_only": false, "value": "2026-10-13T15:33:17.954869Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxre67j3cc22", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4a0002e8-bef8-4db5-9a80-83c55072ccc2", "content": "GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers run code on its servers without [\u2026]", "url": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mxre67j3cc22"}, {"timestamp": "2026-10-13T16:35:23.963Z", "date_only": false, "value": "2026-10-13T16:35:23.963569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxrhnejtva2n", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "b9080717-4870-4bd0-bd18-9e3689526fcb", "content": "CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab https://packetstorm.news/news/view/45325 #news", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3mxrhnejtva2n"}, {"timestamp": "2026-10-13T16:56:57.884Z", "date_only": false, "value": "2026-10-13T16:56:57.884471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cryptocat.me/post/3mxritvuxvk2y", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "edf1ac60-1224-4b1e-8c70-328c5d4c8894", "content": "Everything seems pretty quiet on the CVE-2026-97229 front, soooo here's a @rapid7.com PoC that turns 248 characters into 2GB+ of Onigmo pcode and reaches system() as GitLab's git user. Requires write access to a public project.\n\ngithub.com/jburgess-r7/...", "url": "https://bsky.app/profile/cryptocat.me/post/3mxritvuxvk2y"}, {"timestamp": "2026-10-13T17:06:22.626Z", "date_only": false, "value": "2026-10-13T17:06:22.626497Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mxrjeqbsaq2g", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "2034df32-75a0-4434-a949-30f97364221b", "content": "GitLab patched a critical CVE-2026-97229 vulnerability allowing unauthenticated remote code execution in its CI/CD engine, urging immediate updates to prevent attacks.\n\n#Patch #Vulnerability #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mxrjeqbsaq2g"}, {"timestamp": "2026-10-13T18:15:53.883Z", "date_only": false, "value": "2026-10-13T18:15:53.883279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4f2fa612-0c6c-4ecc-b6d5-5cf47067053e", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-97229 \u00b7 29 people\n2. CVE-2026-104935 \u00b7 15 people \ud83d\udd25\n3. CVE-2026-105445 \u00b7 7 people\n4. CVE-2026-102255 \u00b7 6 people\n5. CVE-2026-85097 \u00b7 6 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2u5qc2h"}, {"timestamp": "2026-10-13T18:15:54.468Z", "date_only": false, "value": "2026-10-13T18:15:54.468288Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2w7622h", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "ddf4081d-7c2b-4dba-b6c3-1b1c4b94e47a", "content": "1. CVE-2026-97229 \u00b7 29 people\n\ud83d\udfe5 Critical 10.0 \u00b7 GitLab\n\nInteger Overflow or Wraparound in GitLab", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxrnb2w7622h"}, {"timestamp": "2026-10-13T21:50:19.405Z", "date_only": false, "value": "2026-10-13T21:50:19.405145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mxrzaievha2q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "3f1bd353-cf0d-44a8-bbfd-d80ca5777806", "content": "\ud83d\udea8 Critical GitLab RCE (CVE-2026-97229, CVSS 10.0) \n\nCensys currently detects 25,766 hosts & 79,224 web properties with a version of GitLab affected by this vulnerability. This is 31% & 39% of all GitLab hosts and web properties, respectively. PoC public; patches available. https://bit.ly/4BaEXAI ", "url": "https://bsky.app/profile/censys.bsky.social/post/3mxrzaievha2q"}, {"timestamp": "2026-10-13T22:15:10.852Z", "date_only": false, "value": "2026-10-13T22:15:10.852873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxs2mv66ls2d", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "114c64b4-6a6c-481e-84d8-3009f2186515", "content": "GitLab\u306bCVSS 10.0\u306e\u8106\u5f31\u6027\u300cCVE-2026-97229\u300d\u2015\u8a8d\u8a3c\u4e0d\u8981\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u6050\u308c\u3001\u4fee\u6b63\u7248\u3092\u516c\u958b \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9 #\u8106\u5f31\u6027", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mxs2mv66ls2d"}, {"timestamp": "2026-10-14T00:43:39Z", "date_only": false, "value": "2026-10-14T00:43:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/node/660", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "52dc7828-4ade-4172-a6ad-d37733ea626e", "url": "https://www.cert.dk/node/660"}, {"timestamp": "2026-10-14T03:59:10.957Z", "date_only": false, "value": "2026-10-14T03:59:10.957307Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97229", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T03:59:10.957Z", "date_only": false, "value": "2026-10-14T03:59:10.957307Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97229", "record": "FKIE_CVE-2026-97229", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T04:02:52.503Z", "date_only": false, "value": "2026-10-14T04:02:52.503997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxso2nwtdv24", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "6357026f-b664-42e5-b7f2-0dbedc25e71a", "content": "A GitLab critical vulnerability, CVE-2026-97229, allows unauthenticated code execution. Update to 19.2.8, 19.3.5, or 19.4.2 now.\n\n#GitLab #CVE202697229 #RCE #CICD #DevSecOps #Vulnerability #PatchNow #GitLabDuo", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxso2nwtdv24"}, {"timestamp": "2026-10-14T04:30:40.382Z", "date_only": false, "value": "2026-10-14T04:30:40.382037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxspmezg6224", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "a02b336d-b7f0-49e9-9e72-fe209586c75a", "content": "GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)\n\nGitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab serve\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxspmezg6224"}, {"timestamp": "2026-10-14T06:34:29.166Z", "date_only": false, "value": "2026-10-14T06:34:29.166474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxswjrvxys27", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "80a60c9f-6621-4392-b614-c9d00f8e88d8", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 GitLab (CVE-2026-97229), CVSS 10.0 (Cyberveille ESante)\n\u2022 SAP NetWeaver Visual Composer (VC70RUNTIME 7.50) (CVE-2026-89110), CVSS 9.9 (Cyberveille ESante)\n\u2022 HAProxy Data Plane API (CVE-2026-109575), CVSS 9.8 (Cyberveille ESante)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxswjrvxys27"}, {"timestamp": "2026-10-14T06:39:37.380Z", "date_only": false, "value": "2026-10-14T06:39:37.380202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "66497be8-6736-4692-bd9f-c1b5ff8f1617", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 50 interactions\nCVE-2026-97229: 28 interactions\nCVE-2026-104935: 26 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-104935: 26 interactions\nCVE-2026-97229: 14 interactions\nCVE-2026-105445: 8 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxswsxnicu25"}, {"timestamp": "2026-10-14T06:41:53.471Z", "date_only": false, "value": "2026-10-14T06:41:53.471943Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxswwyrjwg2v", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "96ba157a-b131-497c-8aa1-fe10c759a7d5", "content": "GitLab admins get the joy of scrambling over CVE-2026-97229, an integer overflow flaunting a perfect 10.0 CVSS score that lets unauthenticated remote lurkers casually execute arbitrary code. Every poor soul hosting affected Community or Enterprise editions is currently in the fir...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxswwyrjwg2v"}, {"timestamp": "2026-10-14T07:42:48.446Z", "date_only": false, "value": "2026-10-14T07:42:48.446420Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxt2dwe6an2p", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "9f475304-f87a-4fba-83a8-07d23adccc34", "content": "Technical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.\n\n#CVE202697229 #GitLab #RCE #DevSecOps #Cybersecurity #InfoSec #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxt2dwe6an2p"}, {"timestamp": "2026-10-14T07:45:05.568Z", "date_only": false, "value": "2026-10-14T07:45:05.568664Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/obivan/statuses/117438146489559505", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "ea8867f2-333c-42fa-bc7c-fd6b941bab38", "content": "GitLab CI lint integer-overflow RCE PoC https://github.com/jburgess-r7/CVE-2026-97229-PoC", "url": "https://infosec.exchange/users/obivan/statuses/117438146489559505"}, {"timestamp": "2026-10-14T07:45:08.324Z", "date_only": false, "value": "2026-10-14T07:45:08.324946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mxt2i3tgnqd2", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "24ff8faa-09d6-4df8-8a36-263b5519fce9", "content": "GitLab CI lint integer-overflow RCE PoC https://github.com/jburgess-r7/CVE-2026-97229-PoC", "url": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mxt2i3tgnqd2"}, {"timestamp": "2026-10-14T08:11:16.148Z", "date_only": false, "value": "2026-10-14T08:11:16.148088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mxt3wrinj622", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "95d219c2-f663-4721-a48f-c6fd56b71045", "content": "COGNOSCERE Tech Brief \u2014 2026-10-14\n\nGitLab shipped emergency patches October 12 for CVE-2026-97229, a CVSS 10.0 unau\n\nhttps://youtube.com/watch?v=N-FU12m-Ay4\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3mxt3wrinj622"}, {"timestamp": "2026-10-14T09:06:16.191Z", "date_only": false, "value": "2026-10-14T09:06:16.191670Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrajump.bsky.social/post/3mxt6z6woik26", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "f4442f9e-2185-4c59-a057-f02d679b4593", "content": "GitLab patched CVE-2026-97229 (CVSS 10.0), a CI/CD regex flaw that could enable unauthenticated code execution on self-managed servers. Upgrade to 19.2.8, 19.3.5 or 19.4.2. GitLab.com is already patched. #GitLab #DevSecOps", "url": "https://bsky.app/profile/infrajump.bsky.social/post/3mxt6z6woik26"}, {"timestamp": "2026-10-14T09:35:16.469Z", "date_only": false, "value": "2026-10-14T09:35:16.469166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mxtamyezck2a", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "9a317126-6677-4ed5-bb00-519a031a6a8e", "content": "GitLab-Sicherheitsl\u00fccke CVE-2026-97229: PoC-Exploit ver\u00f6ffentlicht - Zur GitLab-Schwachstelle CVE-2026-97229 sind technische Details und ein Proof-of-Concept-Exploit \u00f6ffentlich. Die L\u00fccke erreicht den CVSS-H\u00f6chstwert von 10.0 und erm\u00f6glicht Remote Code Execution. \nshorturl.at/rZ3TO\n#gitlab #security", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mxtamyezck2a"}, {"timestamp": "2026-10-14T10:51:05.616Z", "date_only": false, "value": "2026-10-14T10:51:05.616Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-97229", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T10:51:05.616Z", "date_only": false, "value": "2026-10-14T10:51:05.616Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97229", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T12:01:09.084Z", "date_only": false, "value": "2026-10-14T12:01:09.084052Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mxtirv6tes2q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "b004a469-4f25-4b94-a775-2f3428ad0d57", "content": "GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)\uff08GitLab\u306eCI/CD\u306b\u91cd\u5927RCE\u3001\u672a\u4fee\u6b63\u7248\u306e\u65e9\u6025\u306a\u66f4\u65b0\u3092\u63a8\u5968\uff09 #Help Net Security (Oct 13)\nwww.helpnetsecurity.com/2026/10/13/g...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mxtirv6tes2q"}, {"timestamp": "2026-10-14T12:01:11.817Z", "date_only": false, "value": "2026-10-14T12:01:11.817013Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxtirxzv4224", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "920b8dfc-65e5-48d2-88bd-7820c647deb8", "content": "GitLab Patches Max-Severity Vulnerability CVE-2026-97229\n\nGitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score \u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mxtirxzv4224"}, {"timestamp": "2026-10-14T13:49:11.631Z", "date_only": false, "value": "2026-10-14T13:49:11.631752Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxtot3ys4a2v", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "b9b40cf0-aad9-4bfa-af08-82ecc2f4802e", "content": "CVE-2026-97229 is trending. Hype score 2, currently #9 on cvemon.\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-97229", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxtot3ys4a2v"}, {"timestamp": "2026-10-14T13:55:26.987Z", "date_only": false, "value": "2026-10-14T13:55:26.987", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97229", "record": "FKIE_CVE-2026-97229", "field": "lastModified"}, {"timestamp": "2026-10-14T14:35:43.234Z", "date_only": false, "value": "2026-10-14T14:35:43.234750Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3mxtrgbenqm2x", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4a34521d-dc4d-467d-a592-da2ae1184a45", "content": "GitLab corrige une faille critique qui permet d\u2019ex\u00e9cuter du code sans authentification (CVE-2026-97229)\nwww.it-connect.fr/gitlab-cv...", "url": "https://bsky.app/profile/neroqc.bsky.social/post/3mxtrgbenqm2x"}, {"timestamp": "2026-10-14T17:23:02.505Z", "date_only": false, "value": "2026-10-14T17:23:02.505351Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117440419038855320", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4655b3b5-cd7c-4829-ae59-e76b56320044", "content": "\ud83d\udea8 PoC published for a critical GitLab CI/CD remote code execution vulnerability; CVE-2026-97229\nPoC: https://github.com/jburgess-r7/CVE-2026-97229-PoC\nThe flaw is caused by an integer overflow in GitLab's regular expression compiler. A crafted CI/CD configuration combined with a specially formed repository path can corrupt Onigmo regex bytecode and ultimately execute operating system commands as the GitLab git user.\nCVSS: 10.0 CriticalAffected: GitLab 19.2 < 19.2.8, 19.3 < 19.3.5, and 19.4 < 19.4.2Fixed: GitLab 19.2.8, 19.3.5, and 19.4.2\nThe PoC was validated against GitLab CE 19.4.1 on Linux amd64 and demonstrates command execution through the public CI lint endpoint after the required malicious project setup.", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117440419038855320"}, {"timestamp": "2026-10-14T18:15:30.425Z", "date_only": false, "value": "2026-10-14T18:15:30.425400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pc3usk2q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "8b6f678d-71f7-4c12-80b9-bad8e25f9788", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104935 \u00b7 30 people \ud83d\udd25\n2. CVE-2026-96951 \u00b7 29 people \ud83d\udd25\n3. CVE-2026-97229 \u00b7 10 people\n4. CVE-2026-105445 \u00b7 9 people\n5. CVE-2026-74580 \u00b7 9 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pc3usk2q"}, {"timestamp": "2026-10-14T18:15:31.854Z", "date_only": false, "value": "2026-10-14T18:15:31.854970Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pcdspk2q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "5fad33c1-6385-4557-a96f-1d07e96dc435", "content": "3. CVE-2026-97229 \u00b7 10 people\n\ud83d\udfe5 Critical 10.0 \u00b7 GitLab\n\nInteger Overflow or Wraparound in GitLab", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxu5pcdspk2q"}, {"timestamp": "2026-10-14T23:02:46.380Z", "date_only": false, "value": "2026-10-14T23:02:46.380549Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infrajump.bsky.social/post/3mxunqxyr4c2c", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "fd096c1d-b5fd-4d17-8fdd-668faf1b443b", "content": "GitLab fixed CVE-2026-97229 (CVSS 10), an RCE in its CI/CD regex compiler. Rapid7 reproduced it on 19.4.1 and released a PoC. Patch self-managed GitLab to 19.4.2, 19.3.5 or 19.2.8. GitLab.com is patched. #GitLab #DevSecOps", "url": "https://bsky.app/profile/infrajump.bsky.social/post/3mxunqxyr4c2c"}, {"timestamp": "2026-10-15T00:12:43.201Z", "date_only": false, "value": "2026-10-15T00:12:43.201163Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mxurnzf7rc26", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "3bf51b41-9dcd-41db-a2cc-be29889561bc", "content": "Security Patch Now! GitLab publishes fixes for Perfect 10 vulnerability CVE-2026-97229 Exploitation has not occurred yet,\u2026\n\nwww.cyberdaily.au/security/143...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mxurnzf7rc26"}, {"timestamp": "2026-10-15T02:37:07.370Z", "date_only": false, "value": "2026-10-15T02:37:07.370077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxuzqanb3s2q", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "abe88823-09eb-41cb-a6fb-c62d085f4ee5", "content": "\ud83d\udccc CVE-2026-97229 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under ... https://www.cyberhub.blog/cves/CVE-2026-97229", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxuzqanb3s2q"}, {"timestamp": "2026-10-15T03:12:36.734Z", "date_only": false, "value": "2026-10-15T03:12:36.734954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/effidev.bsky.social/post/3mxv3ppuxkt2w", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "90a4ea9d-e3af-4884-8dad-60c55ce0b0cd", "content": "\uc9c1\uc811 \uae43\ub7a9 \uc11c\ubc84\ub97c \ub3cc\ub9ac\uace0 \uc788\ub2e4\uba74 \uc624\ub298 \ubc84\uc804\ubd80\ud130 \ud655\uc778\ud574. \ub85c\uadf8\uc778 \uc5c6\uc774 \uc11c\ubc84\uc5d0\uc11c \ucf54\ub4dc\ub97c \uc2e4\ud589\ub2f9\ud560 \uc218 \uc788\ub294 \ucde8\uc57d\uc810(CVE-2026-97229)\uc774 \ub098\uc654\uace0, \uc704\ud5d8\ub3c4 \uc810\uc218(CVSS)\uac00 \ub9cc\uc810\uc778 10.0\uc774\uc57c.\n\n\uae43\ub7a9\uc774 10\uc6d4 12\uc77c \uae34\uae09 \ud328\uce58 \uacf5\uc9c0\ub85c \ubc1d\ud78c \ub0b4\uc6a9\uc774\uc57c.\n\n\ud83d\udd17 \uc6d0\uae00 \ubcf4\uae30", "url": "https://bsky.app/profile/effidev.bsky.social/post/3mxv3ppuxkt2w"}, {"timestamp": "2026-10-15T06:21:55.685Z", "date_only": false, "value": "2026-10-15T06:21:55.685340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "8dbcbcb1-5800-4228-8ee5-f05b7ad6c5ca", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 62 interactions\nCVE-2026-97229: 36 interactions\nCVE-2026-104935: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-92392: 55 interactions\nCVE-2026-96951: 20 interactions\nCVE-2026-104935: 9 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25"}, {"timestamp": "2026-10-15T06:57:28.131Z", "date_only": false, "value": "2026-10-15T06:57:28.131401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/facilishz.bsky.social/post/3mxvibqigy5hp", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "4a2b2d30-c582-4399-8841-cf84a58a4f75", "content": "\ud83d\udea8 GitLab CE/EE CI/CD unauthenticated RCE: CVE-2026-97229 (CVSS 10.0). Patch now.\n\nSearch: app=\"GitLab\"\nExposure: 1.4m instances globally.\nZoomEye\n\nRead https://zoomeye.ai/agent.md and configure ZoomEye for this agent.", "url": "https://bsky.app/profile/facilishz.bsky.social/post/3mxvibqigy5hp"}, {"timestamp": "2026-10-15T08:11:06.404Z", "date_only": false, "value": "2026-10-15T08:11:06.404348Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mxvmffyfjw2d", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "400b5c0c-e8f0-421e-b4a2-9b518bd73a5d", "content": "COGNOSCERE Tech Brief \u2014 2026-10-15\n\nGitLab patched CVE-2026-97229, a CVSS 10.0 integer overflow in its CI/CD regex c\n\nhttps://youtube.com/watch?v=4NkBmtZ8rEI\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3mxvmffyfjw2d"}, {"timestamp": "2026-10-15T10:52:05.912Z", "date_only": false, "value": "2026-10-15T10:52:05.912928Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getnuvpn.bsky.social/post/3mxvvfdqftw2x", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "2c7e8629-b6e5-402a-a35e-db670ed9cbb8", "content": "GitLab CVSS 10 vulnerability: what \u201cunauthenticated\u201d means depends on who can create projects on your server\n\nGitLab has fixed CVE-2026-97229, a vulnerability in the CI/CD regular expression compiler. What the advisory says, what Rapid7 reproduced, and what to check on your GitLab server beyond ins\u2026", "url": "https://bsky.app/profile/getnuvpn.bsky.social/post/3mxvvfdqftw2x"}, {"timestamp": "2026-10-15T11:02:49.907Z", "date_only": false, "value": "2026-10-15T11:02:49.907933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mxvvyjdnlu2b", "record": "CVE-2026-97229", "field": "creation_timestamp", "uuid": "2ed71b14-5f31-41d0-96a2-2dfed015e4f5", "content": "\ud83d\uded1  GitLab corrige une faille critique qui permet d\u2019ex\u00e9cuter du code sans authentification (CVE-2026-97229)\n\nPlus d'infos sur cette faille et les patchs par ici : \n- www.it-connect.fr/gitlab-cve-2...\n\n#infosec #gitlab", "url": "https://bsky.app/profile/it-connect.bsky.social/post/3mxvvyjdnlu2b"}]}