Integer Overflow or Wraparound in GitLab

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

What is CVE-2026-110264?

CVE-2026-110264 is a vulnerability classified as Integer Overflow or Wraparound, affecting GitLab (affected versions: 7.0 – < 18.11.13, 19.0 – < 19.0.10, and other affected versions). This vulnerability is rated Critical, with a CVSS score of 10. Public exploit code or evidence is available for this vulnerability, but that does not confirm exploitation in the wild.

Analyzing data...

Overview

Original source data

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.

Affected products and scope

Analyzing data...

Technical details

Analyzing data...

Exploitability

Analyzing data...

Technical impact

Analyzing data...

Business impact

Analyzing data...

Remediation

Analyzing data...

Detection

Analyzing data...
Sources (8)
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.