Gateway

Munich is pursuing a bid for the 2036 Olympic Games, but its main railway station is not expected to be fully rebuilt and ready until 2038. That means the city's central transport gateway, through which most Olympic visitors would arrive, would still be unfinished if the Games come to Munich, raising concerns about infrastructure readiness ahead of a possible bid.

GitLab has fixed a critical vulnerability, tracked as CVE-2026-90970, affecting its AI Gateway component. Security outlets are urging users to update their deployments promptly, as flaws in AI gateway infrastructure could expose sensitive data or allow unauthorized access. Administrators are advised to review the advisory and apply the patch as soon as possible.

Cloudflare has announced an OHTTP (Oblivious HTTP) gateway, a service that lets websites receive requests without learning the client's IP address or other identifying metadata. The technology separates the request's content from its origin using relay servers, improving user privacy. Developers on Hacker News are discussing the technical trade-offs, potential for abuse, and how it compares to similar privacy-preserving designs like Apple's Private Relay.

GitLab has disclosed CVE-2026-90970, a critical remote code execution vulnerability in its AI Gateway service. The flaw allows authenticated users with Duo Agent Platform access to escape the prompt sandbox and execute arbitrary commands. Self-hosted instances are affected, and security teams are being urged to patch promptly.

Cloudflare has announced the launch of its OHTTP Gateway, a service built around Oblivious HTTP, a protocol designed to let clients send requests through a relay so that neither the relay nor the target server can link a request to its sender. The move strengthens Cloudflare's privacy-focused infrastructure offerings and follows growing industry adoption of oblivious proxying standards. Early technical discussion online is just beginning, with limited commentary so far.

A new vulnerability tracked as CVE-2026-88779 has been disclosed affecting Citrix NetScaler ADC and NetScaler Gateway, with a high severity rating of 8.7 on the CVSS scale. The finding is circulating among cybersecurity professionals, who are monitoring the flaw for details on exploitation and the availability of patches from Citrix.

A round of self-hosted software updates was released on 4 October. Wekan v12.18 brings updated image processing and development dependencies, fluxer-gateway improves data processing efficiency, and MCSManager v10.19.0 adds automatic updates alongside bug fixes. Open-source enthusiasts tracking self-hosting projects are noting the releases as routine but useful maintenance across several popular tools.

Brussels Airport (BRU), Belgium's main international airport, is being discussed as a key travel hub. The airport serves as the country's primary gateway for passengers and cargo, connecting Brussels to destinations across Europe and beyond. No specific incident or announcement has been confirmed, but interest in the airport's operations and role in European air travel is circulating.

Oracle has announced NAT support on its Dynamic Routing Gateway (DRG), a networking feature that lets enterprises connect on-premises networks to Oracle Cloud Infrastructure even when both sides use overlapping IP address ranges. By translating addresses in transit, the gateway removes the need to renumber networks before establishing private connectivity, a long-standing pain point for migrations, mergers and multi-cloud setups.