ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 2h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 5h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 8h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 8h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 9h Vulnerabilitas in software Sparx Systems Enterprise Architect · 9h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 9h Vulnerabilitates in Slican telephonis · 10h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 13h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 14h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-1868

CRITICAL CVSS 9.9 CVSS 3.1 📌 Deferred

CVE-2026-1868 - Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

GitLab has remediated a vulnerability in the Duo Workflow Service component of GitLab AI Gateway affecting all versions of the AI Gateway from 18.1.6, 18.2.6, 18.3.1 to 18.6.1, 18.7.0, and 18.8.0 in which AI Gateway was vulnerable to insecure template expansion of user supplied data via crafted Duo Agent Platform Flow definitions. This vulnerability could be used to cause Denial of Service or gain code execution on the Gateway. This has been fixed in versions 18.6.2, 18.7.1, and 18.8.1 of the GitLab AI Gateway.

Publicatum: Feb 09, 2026 07:16

Ultima Mutatio: Jun 17, 2026 10:16