CISA flags GitLab and Cisco flaws as actively exploited, adds them to national vulnerability list

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced today that it has added newly identified security weaknesses in GitLab and Cisco products to its Known Exploited Vulnerabilities (KEV) catalog, signaling that these flaws are being leveraged by threat actors in the wild.

CISA’s KEV list serves as a central repository of vulnerabilities that have been confirmed to be under active exploitation. By publishing these entries, the agency provides federal agencies, critical‑infrastructure operators, and the broader private sector with a clear, actionable signal to prioritize patching and mitigation efforts before the vulnerabilities cause broader damage.

The inclusion of a GitLab flaw underscores the growing risk to software development pipelines. GitLab, a widely used platform for source code management, continuous integration, and DevOps collaboration, is a frequent target for attackers seeking to insert malicious code or disrupt development workflows. While CISA did not disclose the technical details, the agency’s decision to label the issue as “known exploited” suggests that malicious actors have already crafted exploits that could compromise repositories or gain unauthorized access to build environments.

Cisco’s addition reflects the agency’s ongoing focus on network infrastructure security. Cisco’s hardware and software solutions power a substantial portion of enterprise and carrier networks worldwide, making any vulnerability in its stack a high‑value target. By flagging the Cisco flaw, CISA is warning organizations that the vulnerability is not merely theoretical but is actively being used to infiltrate or disrupt network operations.

Security teams are urged to review the KEV catalog, verify whether the affected GitLab and Cisco components are present in their environments, and apply any available patches or workarounds without delay. CISA typically coordinates with vendors to ensure remediation guidance is published promptly. As the threat landscape evolves, the agency expects to continue expanding the catalog, offering a transparent view of the most pressing risks and helping organizations allocate resources to defend against the most imminent attacks.