https://vulnerability.circl.lu/sightings/feed 2026-10-05T19:26:54.316473+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2e39c102-32b4-4993-855b-d54ba2b3d96a/export 2026-10-05T19:26:54.339394+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2e39c102-32b4-4993-855b-d54ba2b3d96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/xakep_ru/20169", "content": "\u0412 GitLab AI Gateway \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u043d\u0430 9,9 \u0431\u0430\u043b\u043b\u0430\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-90970, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 AI Gateway. \u0411\u0430\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 9,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0445\u043e\u0441\u0442\u044f\u0442 AI Gateway.\n\nhttps://xakep.ru/2026/10/05/ai-gateway-patch/", "creation_timestamp": "2026-10-05T17:40:34.000000Z"} 2026-10-05T17:40:34+00:00 https://vulnerability.circl.lu/sighting/5f33ff6d-3dea-4790-bd8c-73f5ace33e1f/export 2026-10-05T19:26:54.341120+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f33ff6d-3dea-4790-bd8c-73f5ace33e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mx5cfk75ju23", "content": "~Checkpoint~\nActive exploitation, ransomware, phishing, AI-enabled attacks and major breaches reported.\n-\nIOCs: CVE-2026-76504, CVE-2026-88771, CVE-2026-90970\n-\n#CVE #Ransomware #ThreatIntel", "creation_timestamp": "2026-10-05T16:08:18.544767Z"} 2026-10-05T16:08:18.544767+00:00 https://vulnerability.circl.lu/sighting/f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4/export 2026-10-05T19:26:54.341336+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f94f6ec2-c9b2-4ad7-99b7-05d447aeebc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/true_secator/8677", "content": "GitLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 AI Gateway, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445.\n\nAI Gateway - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0438\u0441 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c GitLab Duo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0418\u0418.\n\nGitLab \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 AI Gateway, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0434\u043b\u044f GitLab.com, GitLab Self-Managed \u0438 GitLab Dedicated, \u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043d\u0430 GitLab Self-Managed \u0447\u0435\u0440\u0435\u0437 GitLab Duo Self-Hosted.\n\nCVE-2026-90970 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Duo Agent \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043e\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0442\u043e\u043a\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 AI Gateway.\n\nGitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 19.2.4, 19.3.2 \u0438 19.4.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Self-Hosted AI Gateway. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 AI Gateway, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 GitLab, \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u0438\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0448\u043b\u044e\u0437\u044b \u0418\u0418, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 CVE-2026-85706 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 GitLab Community Edition (CE) \u0438 Enterprise Edition (EE) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0438 \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV CISA.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2021, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 GitLab, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043e\u0434\u043d\u0430 - \u0431\u0430\u043d\u0434\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.", "creation_timestamp": "2026-10-05T15:00:07.000000Z"} 2026-10-05T15:00:07+00:00 https://vulnerability.circl.lu/sighting/c627f540-b58c-45af-80bf-ba3310d5f737/export 2026-10-05T19:26:54.341580+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c627f540-b58c-45af-80bf-ba3310d5f737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mx524qu3pi26", "content": "\ud83d\udd17 CVE : CVE-2026-90970", "creation_timestamp": "2026-10-05T13:40:12.564003Z"} 2026-10-05T13:40:12.564003+00:00 https://vulnerability.circl.lu/sighting/cdb2814c-937c-4c6d-8dba-19dc02c2c736/export 2026-10-05T19:26:54.341758+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cdb2814c-937c-4c6d-8dba-19dc02c2c736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/9583", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"} 2026-10-05T09:38:06+00:00 https://vulnerability.circl.lu/sighting/d0b8cf7a-fec4-4780-954c-7df607104927/export 2026-10-05T19:26:54.341943+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0b8cf7a-fec4-4780-954c-7df607104927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/CyberSecurityIL/87661", "content": "\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1-AI Gateway \u05e9\u05dc\u05d4, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05d4\u05e8\u05e6\u05ea \u05e4\u05e7\u05d5\u05d3\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4, CVE-2026-90970 \u05e2\u05dd CVSS 9.9 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d4\u05ea\u05e7\u05e0\u05d5\u05ea Self-Hosted \u05e9\u05dc GitLab AI Gateway. \n\n\u05d2\u05d9\u05d8\u05dc\u05d0\u05d1 \u05e4\u05e8\u05e1\u05de\u05d4 \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05d1\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 19.2.4, 19.3.2 \u05d5-19.4.1. \n\u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05e9\u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d1-AI Gateway \u05de\u05e0\u05d5\u05d4\u05dc \u05dc\u05d0 \u05e0\u05d3\u05e8\u05e9\u05d9\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05df.\n\nhttps://t.me/CyberSecurityIL/9583", "creation_timestamp": "2026-10-05T09:38:06.000000Z"} 2026-10-05T09:38:06+00:00 https://vulnerability.circl.lu/sighting/846441c3-8643-4d9d-b43f-1cd06fd65068/export 2026-10-05T19:26:54.342118+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "846441c3-8643-4d9d-b43f-1cd06fd65068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://t.me/Russian_OSINT/8003", "content": "\u2757\ufe0fGitLab \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u2194\ufe0fCVSS 9,9 \u0432 \u0418\u0418-\u0448\u043b\u044e\u0437\u0435 \u0434\u043b\u044f Duo\n\n\u0412 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 GitLab AI Gateway \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-90970, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0443 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 9,9 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CWE \u043a\u0430\u043a CWE-1336. \u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a GitLab Duo Agent Platform, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u043f\u0440\u043e\u043c\u043f\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u0442\u043e\u043a\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 GitLab AI Gateway.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 GitLab AI Gateway \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 19.2.4, 19.3.2, 19.4.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0442\u043a\u043e\u0439.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-10-05T08:00:17.000000Z"} 2026-10-05T08:00:17+00:00 https://vulnerability.circl.lu/sighting/b5bca28e-f033-44f1-b839-59644bca9d73/export 2026-10-05T19:26:54.342312+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b5bca28e-f033-44f1-b839-59644bca9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/densuke.bsky.social/post/3mx3xhtjmx322", "content": "\u66f4\u65b0\u3055\u308c\u305f\u3088\u3001\u898b\u306b\u6765\u3066\u306d!\u2192 \n\nAI \u306e\u8db3\u5143\u306b\u53e4\u5178\u7684\u306a\u7a74? GitLab AI Gateway CVE-2026-90970\u30fbZammad\u30fbZig 0.17\u30fbUbuntu 26.10 Sequoia PGP\u30fbArm TLBI Domains\uff082026/10/5 Linux\u30fbOSS\u30c8\u30ec\u30f3\u30c9\uff09 https://blog.fuga.jp/posts/2026-10-05-linux-oss-trend/", "creation_timestamp": "2026-10-05T03:20:06.987830Z"} 2026-10-05T03:20:06.987830+00:00 https://vulnerability.circl.lu/sighting/695074bc-7cf3-4816-a333-8ed886d1c9d2/export 2026-10-05T19:26:54.342484+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "695074bc-7cf3-4816-a333-8ed886d1c9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mx3met2er22g", "content": "GitLab AI Gateway\u306b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff1aCVE-2026-90970 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30cb\u30e5\u30fc\u30b9", "creation_timestamp": "2026-10-05T00:01:33.167647Z"} 2026-10-05T00:01:33.167647+00:00 https://vulnerability.circl.lu/sighting/8512b584-067d-468b-9017-7b11fd790689/export 2026-10-05T19:26:54.342664+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8512b584-067d-468b-9017-7b11fd790689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90970", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mx2lvy3mrc24", "content": "CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed\n\nGitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tra\u2026\n#hackernews #news", "creation_timestamp": "2026-10-04T14:20:33.888308Z"} 2026-10-04T14:20:33.888308+00:00