importantSYS.SOURCE: The Hacker News• 2026-10-29T14:35:39+05:30

Critical GitLab Vulnerability CVE-2026-97229 Exploit Attempted on Alpine Linux's Server

#vulnerability #gitlab #rce

An attacker attempted to exploit a critical GitLab vulnerability (CVE-2026-97229, CVSS 10.0) on Alpine Linux's server using a crafted regular expression in a CI configuration. No evidence of successful exploitation was found, despite the flaw being patched a week prior.

An attacker tried to exploit a critical GitLab vulnerability on the Alpine Linux project's own GitLab server a week after GitLab released a fix, Alpine Linux said on 28 October.

The flaw, CVE-2026-97229 (CVSS score: 10.0), can let an attacker run code on a GitLab server through a crafted regular expression in a CI configuration. Alpine found no evidence that the attack worked but

Read original article

*** END OF TRANSMISSION ***

> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS