GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE in the CE/EE regex compiler affecting every release since 7.0
GitLab released critical patch versions on October 21, 2026 for CVE-2026-110264, a CVSS 10.0 integer overflow in the regular expression compiler of GitLab CE/EE. A specially crafted expression could let an unauthenticated attacker run arbitrary code on a self-managed server (docs.gitlab.com). Affected releases go back to version 7.0 (June…