AI description
CVE-2026-110264 is an integer overflow vulnerability in the regular expression compiler of GitLab Community Edition (CE) and Enterprise Edition (EE). Discovered by a security researcher known as "joaxcar" through GitLab's HackerOne bug bounty program, the flaw resides in the background engine responsible for parsing and validating regular expressions. Under certain conditions, an unauthenticated remote attacker can trigger this integer overflow by submitting a specially crafted regular expression. This can lead to a buffer overflow, allowing the attacker to escape the regular expression engine and execute arbitrary code on the affected GitLab server. The vulnerability affects self-managed GitLab CE and EE installations across a wide range of versions, dating back to version 7.0. Specifically, it impacts versions prior to 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, and 19.5.1. GitLab has addressed the issue by releasing security patches in these respective version branches and recommends that administrators of self-managed instances upgrade to the patched versions. GitLab.com and GitLab Dedicated environments have already been updated and do not require further action.
- Description
- An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.
- Source
- cve@gitlab.com
- NVD status
- Undergoing Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 10
- Impact score
- 6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- cve@gitlab.com
- CWE-190
Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.
- Hype score
11
Oct 21, 2026 — maybe the worst patch day in years. 🔴 PHP2Shell — CVE-2026-109618/109619 🔴 Node2Shell — CVE-2026-111497 🔴 GitLab — CVE-2026-110264 💡 Patch NOW! https://t.co/4V9ha2uvpD
@yasecurity
23 Oct 2026
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Here is the CVE list from October 22–23, 2026, consolidated for your reference: 🔴 Critical & High Severity · CVE-2026-110264 (GitLab CE/EE): Critical (CVSS 10.0). An integer overflow in the regex compiler allows unauthenticated remote code execution on self-managed se
@yogsec
23 Oct 2026
55 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
Rubyの正規表現に関する重大な脆弱性の影響について （CVE-2026-89078、CVE-2026-93577、CVE-2026-97229、CVE-2026-110264） Tutterでは、現段階では影響はございません。 https://t.co/ZVksqdedif
@tutter_dev
23 Oct 2026
109 Impressions
1 Retweet
0 Likes
0 Bookmarks
0 Replies
0 Quotes
ExploitGrid Daily Digest 🚨 Top CVEs: CVE-2026-102785 (CVSS: 10) https://t.co/IpdRu5AimX CVE-2026-110063 (CVSS: 10) Microsoft CVE-2026-110264 (CVSS: 10) gitlab CVE-2026-114575 (CVSS: 10) totolink CVE-2026-79844 (CVSS: 10) Hewlett Pack... ..🧵👇
@exploitgrid
23 Oct 2026
88 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 https://t.co/gU6f78wpQu
@Dinosn
23 Oct 2026
3635 Impressions
4 Retweets
27 Likes
6 Bookmarks
2 Replies
0 Quotes
🔴 Critical · Patched Ruby 4.0.9, 3.4.12 and 3.3.13 fix Regexp compiler memory bugs behind GitLab's CVSS 10 RCEs CVE-2026-89078, CVE-2026-93577, CVE-2026-97229, CVE-2026-110264 Fixed in: 4.0.9, 3.4.12, 3.3.13 https://t.co/CF8U1cYFof
@pwnwatch_app
23 Oct 2026
2873 Impressions
1 Retweet
7 Likes
0 Bookmarks
0 Replies
1 Quote