Search: CVE-2026-110264

CVE-2026-110264 is a critical integer overflow vulnerability in GitLab CE/EE affecting multiple version ranges from 7.0 up to fixed releases in late 2023 and 2024. An unauthenticated attacker could exploit this flaw by crafting a malicious regular expression that triggers an integer overflow during compilation, potentially allowing arbitrary code execution on the GitLab server.

This report summarizes multiple cyber threats and incidents observed in late October 2026, including large-scale breaches, supply-chain attacks, AI-enabled cybercrime tools, and critical software vulnerabilities. Notable incidents include a cyberattack on Japanese cloud provider Onamae Desktop Cloud affecting over 26,000 servers, a data breach at India's State Bank of India exposing nearly 3,900 customer records, and a supply-chain compromise of the LiteLLM AI gateway. AI-enabled tools are facilitating large-scale fraud and ransomware attacks targeting critical sectors in the United States. Critical PHP vulnerabilities enabling remote code execution are being widely exploited, with most instances unpatched. Oracle and GitLab have released patches for numerous critical vulnerabilities, including a critical remote code execution flaw in GitLab and a privilege escalation vulnerability in Arista VeloCloud Orchestrator that has been exploited in the wild.