CVE-2026-110264

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-110264
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110264.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-110264
Aliases
Downstream
ALPINE (1)
ALSA (5)
AZL (1)
BELL (1)
CGA (108)
CLSA (8)
DEBIAN (1)
RLSA (5)
Related
ALSA (5)
Published
2026-10-22T00:33:48Z
Modified
2026-11-10T12:12:23Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Integer Overflow or Wraparound in GitLab
Details

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

Database specific 
{
    "cna_assigner": "GitLab",
    "cwe_ids": [
        "CWE-190"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110264.json"
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
93bef4f04a185e21f7596587eb5e1a30f9a857fe
Fixed
566583ad14f11307ca902c2dea58ce049b63058e
Introduced
f07e3c5b3c8128be5db112e5b2b618fe31ea1b35
Fixed
120c54bd6dcb88a771b54cdcf981fe99f503fa59
Introduced
67581074a0aab1f53cdafe7eead5f5d07f3afec8
Fixed
fe72d77fb158efb6b0d4e167133cd21e640315f0
Introduced
68485a1eb627c9a992f266263157327649822db3
Fixed
affb8c7b228049c0042d0370c106093ce8afefa4
Introduced
8f83039bebbbb61d3b7b8b7e2342d1deec1e14c6
Fixed
768c3d28a5b65440eb01ea2753136711c8ab01cc
Introduced
fa703f93afaf1133cd263f6aa0e91d284d7f1ebf
Fixed
ceebe641a1562c694898eeafef794eec40b90522
Introduced
883b289c40e347a45878306997fc3dc9e7e11523
Last Affected
883b289c40e347a45878306997fc3dc9e7e11523
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "18.11.13"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "7.0.0"
                },
                {
                    "fixed": "18.11.13"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.0.0"
                },
                {
                    "fixed": "19.0.10"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.0.0"
                },
                {
                    "fixed": "19.0.10"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.1.0"
                },
                {
                    "fixed": "19.1.9"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.1.0"
                },
                {
                    "fixed": "19.1.9"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.2.0"
                },
                {
                    "fixed": "19.2.9"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.2.0"
                },
                {
                    "fixed": "19.2.9"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.3.0"
                },
                {
                    "fixed": "19.3.6"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.3.0"
                },
                {
                    "fixed": "19.3.6"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.4.0"
                },
                {
                    "fixed": "19.4.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.4.0"
                },
                {
                    "fixed": "19.4.3"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:19.5.0:*:*:*:community:*:*:*",
            "range": [
                {
                    "introduced": "19.5.0"
                },
                {
                    "last_affected": "19.5.0"
                }
            ],
            "source": "CPE_STRING"
        },
        {
            "cpe": "cpe:2.3:a:gitlab:gitlab:19.5.0:*:*:*:enterprise:*:*:*",
            "range": [
                {
                    "introduced": "19.5.0"
                },
                {
                    "last_affected": "19.5.0"
                }
            ],
            "source": "CPE_STRING"
        }
    ]
}

Affected versions

Other
11-10-0cfa69752d8-0d9531c80-ee
11-10-0cfa69752d8-74ffd66ae-ee
11-10-119f9509d50-6d7537235-ee
19.*
19.5.0
v18.*
v18.11.0-ee
v18.11.0-rc42-ee
v18.11.0-rc43-ee
v18.11.12-ee
v18.11.2-ee
v18.11.8-ee
v18.11.9-ee
v19.*
v19.0.0-ee
v19.0.9-ee
v19.1.0-ee
v19.2.0-ee
v19.3.0-ee
v19.4.0-ee
v19.5.0-ee
v7.*
v7.0.0-ee
v7.1.0-ee
v7.1.0.rc1-ee
v7.2.0.rc1-ee
v7.2.0.rc2-ee
v7.2.0.rc3-ee
v7.2.0.rc4-ee
v7.2.0.rc5-ee
v7.3.0-ee
v7.3.0.rc1-ee

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110264.json"