https://exploit-radar.com/en/flux/marques/gitlab.xml The latest additions to CISA’s catalog of exploited vulnerabilities for GitLab products. 2026-09-11T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-85706/ 2026-09-11T00:00:00Z

Apply the patches or mitigations from GitLab; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 11, 2026.

https://exploit-radar.com/en/cve/CVE-2021-22175/ 2026-02-18T00:00:00Z

Apply the patches or mitigations from GitLab; if none are available, stop using the product. For cloud services, follow the guidance from GitLab. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 18, 2026.

https://exploit-radar.com/en/cve/CVE-2021-39935/ 2026-02-03T00:00:00Z

Apply the patches or mitigations from GitLab; if none are available, stop using the product. For cloud services, follow the guidance from GitLab. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 3, 2026.

https://exploit-radar.com/en/cve/CVE-2023-7028/ 2024-05-01T00:00:00Z

Apply the patches or mitigations from GitLab; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 1, 2024.

https://exploit-radar.com/en/cve/CVE-2021-22205/ 2021-11-03T00:00:00Z

Apply the security update from GitLab. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.