Security
GitLab patches a max-severity RCE flaw hiding in its regex compiler
Bleeping Computer reported on 22 October 2026 that GitLab had fixed CVE-2026-110264, a flaw that could let an unauthenticated attacker run code on the server. If you self-host, this is your cue to update now.