CVE-2026-110264GitLab Integer Overflow
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an…
Published Oct 22, 2026 · Updated Nov 6, 2026 · Also known as BIT-gitlab-2026-110264, EUVD-2026-107696, GHSA-83vq-rvff-66gw
Key Facts
Patch in the next maintenance window- CVE-2026-110264 is a critical-severity vulnerability (CVSS 10.0 v3.1) affecting GitLab, Azl3 Ruby 3.3.5-10 (Microsoft), ruby (alpine) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 1.3% probability of exploitation in the next 30 days.
- Fixed versions are available, including GitLab 18.11.13, GitLab 19.0.10, GitLab 19.1.9.
- Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Scores
CVSS v3.1
10.0
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
1.3%
Higher than 71.6% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
57/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
10
Proof-of-concept links
In-the-wild evidence
0
Reports of active use
Advisories And Exploit References
- advisoryhttps://www.cve.org/CVERecord?id=CVE-2026-110264
- advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-110264
- advisoryRHSA-2026:88861
- advisoryRHSA-2026:88865
- advisoryRHSA-2026:88880
- advisoryRHSA-2026:95652
Description
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.
Affected Products
48 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| GitLabGitlab | 19.5.0, >= 7.0.0, >= 19.1 | 18.11.13 |
| Azl3 Ruby 3.3.5-10Microsoft | See advisory | n/a |
| rubyalpine | See advisory | 3.3.13-r0 |
| gitlab-rails-ce-18.8chainguard | See advisory | 18.8.11-r7 |
| gitlab-rails-ce-18.9chainguard | See advisory | 18.9.8-r11 |
Patched Releases
GitLab
18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3, 19.5.1
gitlab-rails-ce-18.8
18.8.11-r7
gitlab-rails-ce-18.9
18.9.8-r11
gitlab-rails-ce-fips-18.10
18.10.8-r11
gitlab-rails-ce-fips-18.8
18.8.11-r10
gitlab-rails-ce-fips-18.9
18.9.8-r12
gitlab-runner-19.3
19.3.5-r0
gitlab-runner-19.4
19.4.3-r0
gitlab-runner-fips-19.3
19.3.5-r0
gitlab-runner-fips-19.4
19.4.3-r0
gitlab-workhorse-ce-18.10
18.10.8-r14
gitlab-workhorse-ce-18.8
18.8.11-r14
gitlab-workhorse-ce-18.9
18.9.8-r17
gitlab-workhorse-ce-fips-18.10
18.10.8-r14
gitlab-workhorse-ce-fips-18.8
18.8.11-r15
gitlab-workhorse-ce-fips-18.9
18.9.8-r16
openvox-agent
0:8.32.0-1.el8sat, 0:8.32.0-1.el9sat
python-pyyaml
0:6.0.1-1.el8pc, 0:6.0.1-1.el9pc
ruby
3.3.13-0, 3.3.13-r0, 3.4.12-r0
ruby-3.3
3.3.12-r10
ruby-3.4
3.4.11-r5
ruby-4.0
4.0.7-r6
ruby3
4-main-3.4.12-33.1.hum1
ruby4
0-main-4.0.9-41.hum1
Timeline
Publicly disclosed
Oct 22, 2026
Last updated
Nov 6, 2026
Weakness Type
- CWE-190 Integer Overflow or Wraparound
References
- advisorycve.org · CVERecord
- advisorynvd.nist.gov · CVE-2026-110264
- advisoryRHSA-2026:88861
- advisoryRHSA-2026:88865
- advisoryRHSA-2026:88880
FAQ
Common Questions.
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code…
Affected: GitLab versions 19.5.0, >= 7.0.0, >= 19.1; Azl3 Ruby 3.3.5-10 (Microsoft); ruby (alpine), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including GitLab 18.11.13, GitLab 19.0.10, GitLab 19.1.9.
Brandefense priority: patch in the next maintenance window, because of its high severity, although no exploitation is known.
Is CVE-2026-110264 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo