GitLab patches CVE-2026-110264, a CVSS 10.0 unauthenticated RCE in CE/EE affecting all versions since 7.0, in critical patch release 19.5.1
GitLab released critical patch versions 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10 and 18.11.13 for GitLab CE/EE on October 21, 2026. The release fixes CVE-2026-110264, an integer overflow in the regular expression compiler that could allow an unauthenticated user to execute arbitrary code on the GitLab server (CVSS 10.0). It affects…