RC RANDOM CHAOS

CVE-2026-110264

1 post

A crafted regex runs code on every GitLab since 2014
Article

A crafted regex runs code on every GitLab since 2014

GitLab's CVE-2026-110264 is a CVSS 10.0 unauthenticated RCE in the Onigmo regex compiler, hitting every self-managed version since 7.0. Patch now.