CVE-2026-110264

CVE Enrichment

CISA KEV: Not listed

Last enrichment sync: 22-Oct-2026 04:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (4)

An earlier release from the same week, 4.0.8, does not include the fix for one of the flaws, CVE-2026-110264, so 4.0 users should install 4.0.9. Ruby Patches Three Onigmo Bugs Behind Four Critical GitLab Flaws
GitLab has released urgent security updates addressing CVE-2026-110264, a maximum-severity vulnerability that could allow an unauthenticated attacker to execute arbitrary code on vulnerable self-managed GitLab servers. GitLab Patches CVSS 10.0 RCE Flaw Affecting Self-Managed CE and EE
This security issue is tracked as CVE-2026-110264 and was reported by a security researcher using the 'joaxcar' handle through GitLab's HackerOne bug bounty program. GitLab Patches Maximum-Severity Flaw Enabling Unauthenticated Remote Code Execution
The flaw, tracked as CVE-2026-110264, is rated 10.0 on the CVSS scale, the maximum. GitLab says that, under certain conditions, it could allow an unauthenticated user to run arbitrary code on the server due to an GitLab Fixes Critical Unauthenticated Code-Execution Flaw Affecting Releases Since 2014

CVE (3)

People (1)

MITRE ATT&CK (1)

Vendors (1)

Products (4)

Tools (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.