2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
Cybersecurity Classified by Officially
Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server [1].
CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.
The vulnerability CVE-2026-110264, with a CVSS score of 10, is a critical integer overflow vulnerability within the regular expression compiler which could allow an unauthenticated user to execute arbitrary code on the affected GitLab server.
GitLab also fixed 2 high severity, 5 medium severity and 4 low severity vulnerabilities [1].
The vulnerability CVE-2026-110264 affects the following versions of GitLab Community and Enterprise Editions [1]:
CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.
This is an extract. The publication continues at the source.
Source: CERT-EU.
Read the original at the source: https://cert.europa.eu/publications/security-advisories/2026-019/
Officially imported this from CERT-EU’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- CERT-EU — imported from official source
- Official source
- https://www.cert.europa.eu/publications/security-advisories-rss RSS
- Imported
- October 22, 2026 10:01
- Versions
- 1 recorded
- Identity
-
security-advisories-10956