<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-09T11:46:53.801038+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/49e5b8ed-dcf5-4d5a-ae76-a9c5e67eb7f9/export</id>
    <title>49e5b8ed-dcf5-4d5a-ae76-a9c5e67eb7f9</title>
    <updated>2026-10-09T11:46:53.825416+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "49e5b8ed-dcf5-4d5a-ae76-a9c5e67eb7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90970", "type": "seen", "source": "https://bsky.app/profile/guruhitech.bsky.social/post/3mxbd7ioky52m", "content": "GitLab corregge una falla critica nell\u2019AI Gateway: rischio esecuzione di comandi sui server\n#agenti #automazione #gitlab #hacker #intelligenzaartificiale #playstation #ps5 #sicurezza #sorveglianza\n\ud83d\udd17 https://guruhitech.com/gitlab-falla-critica-ai-gateway-cve-2026-90970/", "creation_timestamp": "2026-10-07T06:33:28.243627Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/49e5b8ed-dcf5-4d5a-ae76-a9c5e67eb7f9/export"/>
    <published>2026-10-07T06:33:28.243627+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/298a34ab-7399-42e5-a697-9861af240c46/export</id>
    <title>298a34ab-7399-42e5-a697-9861af240c46</title>
    <updated>2026-10-09T11:46:53.827613+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "298a34ab-7399-42e5-a697-9861af240c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mxaddz4zpf2y", "content": "\ud83d\udfe2 Critical 9.9-Point Vulnerability Fixed in GitLab AI Gateway\n\n\ud83d\udde8\ufe0f GitLab developers have released patches for a critical vulnerability, CVE-2026-90970, affecting AI Gateway. The flaw rec\u2026\n\n#news", "creation_timestamp": "2026-10-06T21:03:19.881733Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/298a34ab-7399-42e5-a697-9861af240c46/export"/>
    <published>2026-10-06T21:03:19.881733+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/16f51b7c-a0c4-4730-8f9f-4a01500922a7/export</id>
    <title>16f51b7c-a0c4-4730-8f9f-4a01500922a7</title>
    <updated>2026-10-09T11:46:53.827756+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "16f51b7c-a0c4-4730-8f9f-4a01500922a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mx6pwf43sm2g", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 Citrix NetScaler (CVE-2026-88771), CVSS 9.5 \ud83d\udd34 (Semaine 40, CVE les plus\u2026)\n\u2022 GitLab AI Gateway (CVE-2026-90970), CVSS 9.9 (GitLab AI)\n\u2022 MikroTik RouterOS (CVE-2026-84411), CVSS 9.3 (MikroTik)\nhttps://www.cybowl.eu/cyber/blog_2026-10-05", "creation_timestamp": "2026-10-06T05:43:00.979399Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/16f51b7c-a0c4-4730-8f9f-4a01500922a7/export"/>
    <published>2026-10-06T05:43:00.979399+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a0e82c6-e61c-4ccc-94b1-31792a4cdf86/export</id>
    <title>7a0e82c6-e61c-4ccc-94b1-31792a4cdf86</title>
    <updated>2026-10-09T11:46:53.827841+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a0e82c6-e61c-4ccc-94b1-31792a4cdf86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/VictoryDrones/66172", "content": "\u2757\ufe0fGitLab \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u2194\ufe0fCVSS 9,9 \u0432 \u0418\u0418-\u0448\u043b\u044e\u0437\u0435 \u0434\u043b\u044f Duo\n\n\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 GitLab AI Gateway \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-90970, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 9,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CWE \u043a\u0430\u043a CWE-1336. \u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a GitLab Duo Agent Platform, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u043f\u0440\u043e\u043c\u043f\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u0442\u043e\u043a\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 GitLab AI Gateway.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 GitLab AI Gateway \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 19.2.4, 19.3.2, 19.4.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u043e\u0439.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-10-05T21:33:17.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a0e82c6-e61c-4ccc-94b1-31792a4cdf86/export"/>
    <published>2026-10-05T21:33:17+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e39c102-32b4-4993-855b-d54ba2b3d96a/export</id>
    <title>2e39c102-32b4-4993-855b-d54ba2b3d96a</title>
    <updated>2026-10-09T11:46:53.827937+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e39c102-32b4-4993-855b-d54ba2b3d96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/xakep_ru/20169", "content": "\u0412 GitLab AI Gateway \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u043d\u0430 9,9 \u0431\u0430\u043b\u043b\u0430\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-90970, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 AI Gateway. \u0411\u0430\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 9,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0445\u043e\u0441\u0442\u044f\u0442 AI Gateway.\n\nhttps://xakep.ru/2026/10/05/ai-gateway-patch/", "creation_timestamp": "2026-10-05T17:40:34.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e39c102-32b4-4993-855b-d54ba2b3d96a/export"/>
    <published>2026-10-05T17:40:34+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5f33ff6d-3dea-4790-bd8c-73f5ace33e1f/export</id>
    <title>5f33ff6d-3dea-4790-bd8c-73f5ace33e1f</title>
    <updated>2026-10-09T11:46:53.828021+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5f33ff6d-3dea-4790-bd8c-73f5ace33e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx5cfk75ju23", "content": "~Checkpoint~\nActive exploitation, ransomware, phishing, AI-enabled attacks and major breaches reported.\n-\nIOCs: CVE-2026-76504, CVE-2026-88771, CVE-2026-90970\n-\n#CVE #Ransomware #ThreatIntel", "creation_timestamp": "2026-10-05T16:08:18.544767Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5f33ff6d-3dea-4790-bd8c-73f5ace33e1f/export"/>
    <published>2026-10-05T16:08:18.544767+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4/export</id>
    <title>f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4</title>
    <updated>2026-10-09T11:46:53.828094+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/true_secator/8677", "content": "GitLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 AI Gateway, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445.\n\nAI Gateway - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c GitLab Duo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0418\u0418.\n\nGitLab \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 AI Gateway, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0434\u043b\u044f GitLab.com, GitLab Self-Managed \u0438 GitLab Dedicated, \u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043d\u0430 GitLab Self-Managed \u0447\u0435\u0440\u0435\u0437 GitLab Duo Self-Hosted.\n\nCVE-2026-90970 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Duo Agent \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 AI Gateway.\n\nGitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 19.2.4, 19.3.2 \u0438 19.4.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Self-Hosted AI Gateway. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 AI Gateway, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 GitLab, \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u0438\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0448\u043b\u044e\u0437\u044b \u0418\u0418, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 CVE-2026-85706 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 GitLab Community Edition (CE) \u0438 Enterprise Edition (EE) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2021, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 GitLab, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u0430 - \u0431\u0430\u043d\u0434\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.", "creation_timestamp": "2026-10-05T15:00:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4/export"/>
    <published>2026-10-05T15:00:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c627f540-b58c-45af-80bf-ba3310d5f737/export</id>
    <title>c627f540-b58c-45af-80bf-ba3310d5f737</title>
    <updated>2026-10-09T11:46:53.828209+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c627f540-b58c-45af-80bf-ba3310d5f737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx524qu3pi26", "content": "\ud83d\udd17 CVE : CVE-2026-90970", "creation_timestamp": "2026-10-05T13:40:12.564003Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c627f540-b58c-45af-80bf-ba3310d5f737/export"/>
    <published>2026-10-05T13:40:12.564003+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cdb2814c-937c-4c6d-8dba-19dc02c2c736/export</id>
    <title>cdb2814c-937c-4c6d-8dba-19dc02c2c736</title>
    <updated>2026-10-09T11:46:53.828329+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cdb2814c-937c-4c6d-8dba-19dc02c2c736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/9583", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cdb2814c-937c-4c6d-8dba-19dc02c2c736/export"/>
    <published>2026-10-05T09:38:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d0b8cf7a-fec4-4780-954c-7df607104927/export</id>
    <title>d0b8cf7a-fec4-4780-954c-7df607104927</title>
    <updated>2026-10-09T11:46:53.828443+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d0b8cf7a-fec4-4780-954c-7df607104927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/87661", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d0b8cf7a-fec4-4780-954c-7df607104927/export"/>
    <published>2026-10-05T09:38:06+00:00</published>
  </entry>
</feed>
