GitLab Patches Critical CVSS 10.0 Unauthenticated RCE Flaw

GitLab has issued an emergency patch for CVE-2026-110264, a CVSS 10.0 unauthenticated remote code execution flaw caused by an integer overflow during regex compilation, affecting self-hosted versions dating back to 2014.

2026-10-22 ~ 2026-10-22 · 2 related posts

• GitLab Patches CVSS 10.0 Unauthenticated RCE Flaw Affecting 12 Years of Releases — jedisct1 · 2026-10-22
• GitLab hit by CVSS 10.0 unauthenticated RCE, patches shipped for releases back to 2014 — jd_pressman · 2026-10-22