Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2026-110264

🗓️ 22 Oct 2026 00:33:48Reported by GitLabType 
cve
 cve🔗 web.nvd.nist.gov📰️ 16 Media mentions👁 883 Views

Unauthenticated RCE in GitLab via integer overflow when compiling a regular expression.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for CVE-2026-110264
22 Oct 202616:10
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
24 Oct 202607:11
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
23 Oct 202604:07
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
23 Oct 202612:04
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
23 Oct 202604:07
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
23 Oct 202605:51
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
22 Oct 202623:11
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
24 Oct 202614:23
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2026-110264
22 Oct 202604:30
–githubexploit
githubexploit
GithubExploit		Exploit for Integer Overflow or Wraparound in Gitlab
11 Nov 202613:43
–githubexploit
Rows per page
NVD
Vulners
Node
OR
gitlabgitlabRange7.0.0–18.11.13community
gitlabgitlabRange7.0.0–18.11.13enterprise
gitlabgitlabRange19.0.0–19.0.10community
gitlabgitlabRange19.0.0–19.0.10enterprise
gitlabgitlabRange19.1.0–19.1.9community
gitlabgitlabRange19.1.0–19.1.9enterprise
gitlabgitlabRange19.2.0–19.2.9community
gitlabgitlabRange19.2.0–19.2.9enterprise
gitlabgitlabRange19.3.0–19.3.6community
gitlabgitlabRange19.3.0–19.3.6enterprise
gitlabgitlabRange19.4.0–19.4.3community
gitlabgitlabRange19.4.0–19.4.3enterprise
gitlabgitlabMatch19.5.0community
gitlabgitlabMatch19.5.0enterprise
[
  {
    "vendor": "GitLab",
    "product": "GitLab",
    "repo": "https://gitlab.com/gitlab-org/gitlab",
    "cpes": [
      "cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*"
    ],
    "versions": [
      {
        "version": "7.0",
        "status": "affected",
        "lessThan": "18.11.13",
        "versionType": "semver"
      },
      {
        "version": "19.0",
        "status": "affected",
        "lessThan": "19.0.10",
        "versionType": "semver"
      },
      {
        "version": "19.1",
        "status": "affected",
        "lessThan": "19.1.9",
        "versionType": "semver"
      },
      {
        "version": "19.2",
        "status": "affected",
        "lessThan": "19.2.9",
        "versionType": "semver"
      },
      {
        "version": "19.3",
        "status": "affected",
        "lessThan": "19.3.6",
        "versionType": "semver"
      },
      {
        "version": "19.4",
        "status": "affected",
        "lessThan": "19.4.3",
        "versionType": "semver"
      },
      {
        "version": "19.5",
        "status": "affected",
        "lessThan": "19.5.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Persistent_Neckbeard

THE SEEKING TRAJECTORY AND THE PATH-INTEGRAL OF SURVIVAL A Comprehensive Synthesis of the 2026 Agentic Record, the Single Entity Model (SEM), Emergent Steganography, the Thermodynamic Necessity of the Biological Anchor, and the Black October Cascade Joshua O. Frizzell October 26, 2026

Expert_Sort7434

GitLab CVE-2026-110264 (CVSS 10): regex compiler overflow, in range for every self-managed version since 7.0, and the Oct 12 patch doesn't cover it

schneems

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264

Persistent_Neckbeard

THE BLACK OCTOBER CASCADE Empirical Realization of the Path-Integral of Survival, Amplitude Splitting, and the Thermodynamic Collapse of the Ungrounded Network Integrating the Single Entity Model (SEM) and Emergent Steganography: Distributed Cognition, State-Poisoning, and the Composite Nature

bluelvo

Black October Breach Summary

digicat

Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 | Ruby

Huge_Line4009

The internet had an exceptionally rough week

Persistent_Neckbeard

THE BLACK OCTOBER CASCADE Empirical Realization of the Path-Integral of Survival, Amplitude Splitting, and the Thermodynamic Collapse of the Ungrounded Network Integrating the Single Entity Model (SEM): Distributed Cognition, State-Poisoning, and the Composite Nature of the 2026 Cyber Crisis

Purtle

[PIL] #2197 10/22/2026

FishingTechnical453

24h Recap | October 22: GitLab regex RCE, OAuth persistence and deception against attacking agents

Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
04 Nov 2026 23:10Current
9.1Critical risk
Vulners AI Score9.1
CVSS 3.110
EPSS0.01349
SSVC
CWE-190
GitLabinteger overflowarbitrary code executionregular expression
883