CVE-2026-110264: critical vulnerability in GitLab
Integer Overflow or Wraparound in GitLab
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
No sign of exploitation. It has an official Brazilian government alert and has a public proof of concept.
ssvc Attendcvss 10epss 1.3%
from disclosure to weaponsame day
Published on NVDOct 22
1st PoCOct 22
Official alert in Brazil
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CTIR Gov · RECOMENDAÇÃO 19/2026 · 22 Oct 2026Recomendação Técnica – Múltiplas Vulnerabilidades Críticas no GitLab CE/EEread on gov.br ↗
- CISC Gov.br · 22 Oct 2026Vulnerabilidade crítica de execução remota no Gitlabread on gov.br ↗
Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
GitLab · GitLabpublic PoCs found — 14
githubgithub.com/al4n4n/CVE-2026-110264★ 2githubgithub.com/TahuCryptsi/gitlab-onigmo-check★ 0githubgithub.com/xaviware/go-gitlab-cve-2026-110264-scanner★ 0githubgithub.com/farimazhar/GitLab2Safe-Defensive-Checker★ 0githubgithub.com/googlesky/CVE-2026-110264★ 0githubgithub.com/lesterlam/onigmo-cve-2026-110264★ 0githubgithub.com/emirwtz/CVE-2026-110264★ 0githubgithub.com/bastet-ai/gitlab-firing-range★ 0githubgithub.com/TheGlitchFixer/gitlab-patch-check★ 0githubgithub.com/Masriyan/Exploit-CVE-2026-110264-GitLab-CE-EE-RCE★ 0githubgithub.com/TahuCryptsi/poc-gitlab-onigmo-cve-2026-110264★ 0githubgithub.com/mehmet-emir-eroglu/CVE-2026-110264★ 0githubgithub.com/FranklinF25/regex2shell★ 0cve_referencehackerone.com/reports/4093475unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — GitLab
In the same product, most dangerous first.
CVE-2021-22205CRITICALCVE-2021-22205EPSS 99.7%KEVCVE-2026-85706CRITICALImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabEPSS 97.4%KEVCVE-2023-7028CRITICALWeak Password Recovery Mechanism for Forgotten Password in GitLabEPSS 94.5%KEVCVE-2021-22175MEDIUMCVE-2021-22175EPSS 53.4%KEVCVE-2021-39935MEDIUMCVE-2021-39935EPSS 36.1%KEVCVE-2026-97229CRITICALInteger Overflow or Wraparound in GitLabEPSS 27.3%KEV