🚨 GitLab Regex RCE alert: CVE-2026-110264 carries CVSS 10.0.
A 12-year-old integer overflow in the regular expression compiler could enable unauthenticated remote code execution.
🔴 CVSS 10.0
⚠️ No authentication required
🛠️ Multiple GitLab branches have patched releases
Already patched the previous GitLab regex flaw? Don't assume you're covered. CVE-2026-110264 requires a separate version check.
Technical analysis + affected versions:
https://thecybersecguru.com/news/gitlab-regex-rce-cve-2026-110264/
Content warning: GitLab CVE-2026-110264 is a critical regex compiler integer overflow rated CVSS 10.0. Learn about regular expression RCE, affected versions and security patches
The CyberSec GuruCVE-2026-110264: GitLab Regex Integer Overflow RCE, CVSS 10.0 | The CyberSec GuruGitLab CVE-2026-110264 is a critical regex compiler integer overflow rated CVSS 10.0. Learn about regular expression RCE, affected versions and security patches