BreakingCyber Security
Critical CVSS 10 Remote Code Execution Flaw Patched in GitLab
GitLab disclosed a critical vulnerability (CVE-2026-110264, CVSS 10) in its regex compiler that lets an unauthenticated attacker run arbitrary code on affected GitLab servers. The flaw is an integer overflow and affects a broad range of GitLab Community and Enterprise Edition versions. GitLab also patched 2 high, 5 medium and 4 low severity issues in the same release, and published detection rules for exploitation attempts.