CISA Adds Two Known Exploited Vulnerabilities to Catalog

🗓️ 18 Feb 2026 12:00:00Reported by CISAType

CISA adds two vulnerabilities to the KEV catalog: GitLab Server-Side Request Forgery and RecoverPoint hard coded credentials.

Reporter	Title	Published	Views	Family All 44
ATTACKERKB	CVE-2026-22769	17 Feb 202619:19	–	attackerkb
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficiently checking incoming requests. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Dell RecoverPoint’s data protection software for virtual machines, related to the use of strictly encrypted authentication data, allows a malicious actor to gain unauthorized access to the operating system with root privileges.	18 Feb 202600:00	–	bdu_fstec
Circl	CVE-2021-22175	12 Mar 202512:59	–	circl
Circl	CVE-2026-22769	17 Feb 202619:44	–	circl
CISA KEV Catalog	GitLab Server-Side Request Forgery (SSRF) Vulnerability	18 Feb 202600:00	–	cisa_kev
CISA KEV Catalog	Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability	18 Feb 202600:00	–	cisa_kev
CNNVD	GitLab 代码问题漏洞	11 Jun 202100:00	–	cnnvd
CNNVD	Dell RecoverPoint for Virtual Machines 信任管理问题漏洞	17 Feb 202600:00	–	cnnvd
CNVD	GitLab GitLab Cross-Site Request Forgery Vulnerability	17 Jun 202100:00	–	cnvd