by Kastro
Daily brief · Friday 30 October 2026 · generated 10:56 UTC

55 new criticals.
1 to patch today.

One vulnerability entered CISA KEV overnight, a GitLab GitLab bug. ThemeREX shipped 24 criticals.

cvelistV510:56Z
CISA KEV11:16Z
Vulnrichment10:56Z
NVD10:56Z
EPSS11:16Z

Patch today

In KEV, publicly exploited, or SSVC “Act”. Ordered by priority.
  1. 99priority
    CVE-2026-97229·GitLab GitLab

    Integer Overflow or Wraparound in GitLab

    KEV · added today · due 1 NovEPSS 18%public exploitSSVC actCVSS 10.0

Newly exploited

CVE-2026-97229 · due 1 Nov
GitLab GitLab — Integer Overflow or Wraparound in GitLab

EPSS movers

No EPSS jumps of 15 points or more.

Vendor clusters

ThemeREX24× · Printy, Ozisti, Legal Stone, Le Truffe, Marcell, Meals & Wheels, Mission, Motorix, Muzicon, Nuts, Orpheus, Filmax, Avventure, Bonbon, Coinpress, Edge Decor, EmojiNation, Gamezone, Gamic, Good Homes, Gunslinger, Preservation, RexCoin, QuirkyIBM6× · Langflow OSSProgress Software6× · WS_FTP Server

19 more single-vendor criticals in the full list →