AI Gateway
No AI Gateway CVE is in the CISA KEV catalogue.
Tracked since 8 Feb · latest article Tue 13 Oct · RSS
Exploited, by due date
CSV downloadNo AI Gateway CVE is in the CISA KEV catalogue.
7 articles from 3 outlets since 8 Feb; the latest 13 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 13 Oct · 14:37 UTC | Security Affairs | GitLab patches critical flaw letting attackers run code without logging in |
| Tue 13 Oct · 09:12 UTC | The Hacker News | GitLab Patches Critical Flaw That Could Let Attackers Run Server Code |
| Sun 4 Oct · 08:35 UTC | Security Affairs | Security Roundup Exposes CloudSyncD Mac Backdoor and AI Gateway Flaw |
| Sat 3 Oct · 11:46 UTC | Security Affairs | GitLab AI Gateway Flaw Lets Users Run Commands on Hosts |
| Fri 2 Oct · 22:22 UTC | SecurityOnline | GitLab Patches Critical AI Gateway Flaw Enabling Command Execution |
| Fri 2 Oct · 17:40 UTC | The Hacker News | GitLab Fixes Critical AI Gateway Flaw Enabling Command Execution |
| Sun 8 Feb · 09:00 UTC | SecurityOnline | CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE |
Who reported 3 outlets, last 12 months
- Security Affairs3
- SecurityOnline2
- The Hacker News2
- GitLab patches critical flaw letting attackers run code without logging inSecurity Affairs
- GitLab Patches Critical Flaw That Could Let Attackers Run Server CodeThe Hacker News
- Security Roundup Exposes CloudSyncD Mac Backdoor and AI Gateway FlawSecurity Affairs
- GitLab AI Gateway Flaw Lets Users Run Commands on HostsSecurity Affairs
- GitLab Patches Critical AI Gateway Flaw Enabling Command ExecutionSecurityOnline
- GitLab Fixes Critical AI Gateway Flaw Enabling Command ExecutionThe Hacker News
- CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCESecurityOnline
All CVEs in coverage
2How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.