CISA Warns of GitLab Community and Enterprise Editions SSRF Vulnerability Exploited in Attacks

Cybersecuritynews •Abinaya • February 4, 2026

A critical GitLab vulnerability has been added to the Known Exploited Vulnerabilities (KEV) catalog. Threat actors are actively exploiting a server-side request forgery (SSRF) flaw in GitLab Community and Enterprise editions. The vulnerability, tracked as CVE-2021-39935, poses significant risks to organizations using affected versions of GitLab. The SSRF vulnerability allows unauthorized external attackers to perform […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Alerts on Exploited GitLab SSRF Vulnerability in Community and Enterprise Editions CISA has added a critical server-side request forgery (SSRF) vulnerability in GitLab Community and Enterprise editions, tracked as CVE-2021-39935, to its Known Exploited Vulnerabilities catalog. This vulnerability is currently being exploited by threat actors, posing risks to organizations using affected versions of GitLab. The vulnerability was added to the KEV list on February 3, 2026, indicating active exploitation. 2 sources 30

Extracted Entities

CISA Warns of GitLab Community and Enterprise Editions SSRF Vulnerability Exploited in Attacks

The full story

Extracted Entities

Attack Types (2)

CVEs (1)

Platforms (1)

Vulnerabilities (1)