CERT24A critical vulnerability was discovered in GitLabLoading data…
CERT24Threat Observatory
Period

A critical vulnerability was discovered in GitLab

On 21 October 2026, GitLab released fixes for the critical vulnerability CVE-2026-110264, which may allow an unauthenticated attacker to execute code on a self-managed GitLab server. As of 22 October, there were no publicly confirmed cases of exploitation, no publicly available functioning exploit code, and the vulnerability was not listed in CISA KEV.

← Back to intelligence

A critical vulnerability was discovered in GitLab

On 21 October 2026, GitLab released fixes for the critical vulnerability CVE-2026-110264, which may allow an unauthenticated attacker to execute code on a self-managed GitLab server. As of 22 October, there were no publicly confirmed cases of exploitation, no publicly available functioning exploit code, and the vulnerability was not listed in CISA KEV.