Patch-Now
CVE-2026-110264: CVSS 10 Unauthenticated RCE in Self-Managed GitLab Reaches Back to Version 7.0
GitLab patched a maximum-severity unauthenticated code-execution flaw in self-managed CE and EE, caused by an integer overflow in regex compilation and present in every release since 2014.