CVE-2026-110264
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- Published by NVD
- First covered by RedTeamDaily
- Last updated by NVD
Affected products
| Product | Versions |
|---|---|
| Gitlab Gitlab | from 19.0.0 to before 19.0.10; from 19.1.0 to before 19.1.9; from 19.2.0 to before 19.2.9; from 19.3.0 to before 19.3.6; from 19.4.0 to before 19.4.3; 19.5.0 only and 1 more |
Coverage
CISA adds maximum-severity GitLab flaw CVE-2026-97229 to exploited vulnerabilities catalogue
CISA added CVE-2026-97229 to its Known Exploited Vulnerabilities catalogue on 29 October 2026, confirming active exploitation. The flaw affects GitLab Community Edition and Enterprise Edition, carries a CVSS score of 10.0, and allows unauthenticated remote code execution through a crafted regular expression in a CI/CD configuration. Administrators should update and not confuse this with the separate flaw CVE-2026-110264.
CISA adds VMware ESX CVE-2026-41709 and Linux Fragnesia to KEV; China-linked Warp Panda exploited ESX flaw
CISA added VMware ESX CVE-2026-41709 (insufficient logging, CVSS 7.6) and Linux kernel CVE-2026-46300 (Fragnesia) to its KEV catalogue. CrowdStrike reports that Warp Panda exploited the ESX flaw as a zero-day in early 2026 to reduce audit log visibility. The Cyber Centre also flagged exploitation of a Siemens Software Center DLL sideloading flaw and Gitea vulnerabilities, and urged administrators to apply updates.
Sources: NVD and CISA known exploited vulnerabilities catalogue.