type: cve · created: 2026-10-23 · updated: 2026-10-23 · tags: [cve] · confidence: medium · severity: critical · affected_sectors: [global] · au_impact: false
GitLab released fixes on 21 October for CVE-2026-110264, a flaw rated 10.0 that can let an unauthenticated attacker run arbitrary code on a self-managed server through an integer overflow during compilation of a specially crafted regular expression.
| Attribute | Detail |
|---|---|
| CVE | CVE-2026-110264 |
| CVSS | 10.0 (CRITICAL) |
| Vendor / product | GitLab |
| Reported | 2026-10-23 |