CVE-2026-97229Vulnerability

1. “The two from October, CVE-2026-97229 on the 12th and CVE-2026-110264 on the 21st, need no account and were rated 10.0, the maximum.”

   The Hacker NewsNews23 Oct 2026
   Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

2. “On October 12, GitLab fixed CVE-2026-97229, also an unauthenticated 10.0 overflow in the regex compiler, in versions 19.2.8, 19.3.5, and 19.4.2.”

   The Hacker NewsNews21 Oct 2026
   Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

3. “GitLab has released security updates addressing CVE-2026-97229, a critical vulnerability affecting Community and Enterprise Editions.”

   Check Point ResearchVendor19 Oct 2026
   19th October – Threat Intelligence Report

4. “…— CVE-2026-9192, CVE-2026-85947, CVE-2026-85948, CVE-2026-85955, CVE-2026-85956, CVE-2026-9191 (Progress Software MarkLogic Server), CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814 (GitLab), CVE-2026-103521, CVE-2026-103522, CVE-2026-103523, CVE-2026-103524, CVE-20…”

   The Hacker NewsNews19 Oct 2026
   ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

5. “CVE-2026-97229”

   CERT-FRGovernment19 Oct 2026
   Bulletin d'actualité CERTFR-2026-ACT-044 (19 octobre 2026)

6. “GitLab Patches Max-Severity Vulnerability CVE-2026-97229”

   Security AffairsNews18 Oct 2026
   Security Affairs newsletter Round 600 by Pierluigi Paganini – INTERNATIONAL EDITION

7. “GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)”

   Help Net SecurityNews18 Oct 2026
   Week in review: Hidden implant in Ledger wallets linked to $93M theft, 1,500+ npm packages exposed

8. “Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)”

   Rapid7Vendor16 Oct 2026
   Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

9. “GitLab Patches Max-Severity Vulnerability CVE-2026-97229”

   Security AffairsNews13 Oct 2026
   GitLab Patches Max-Severity Vulnerability CVE-2026-97229

10. “CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab”

    Rapid7Vendor13 Oct 2026
    CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

11. “CVE-2026-97229: Critical GitLab RCE”

    SOCRadarVendor13 Oct 2026
    CVE-2026-97229: Critical GitLab RCE

12. “De kwetsbaarheid met kenmerk CVE-2026-97229 heeft de hoogste CVSS3.1-score van 10.0 gekregen.”

    NCSC-NL advisoriesGovernment13 Oct 2026
    NCSC-2026-0414 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab

13. “GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)”

    Help Net SecurityNews13 Oct 2026
    GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)

14. “The flaw, tracked as CVE-2026-97229, has been described as an integer overflow issue.”

    The Hacker NewsNews13 Oct 2026
    GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

15. “CVE-2026-97229: vulnerabilidad de desbordamiento de enteros en el compilador de expresiones regulares utilizado en las configuraciones de CI/CD.”

    INCIBE-CERTGovernment13 Oct 2026
    Múltiples vulnerabilidades en productos de GitLab

16. “Référence CVE CVE-2026-97229”

    CERT-FRGovernment12 Oct 2026
    Multiples vulnérabilités dans GitLab (12 octobre 2026)

• hxxps://docs.gitlab[.]com/releases/patches/patch-release-gitlab-19-4-2-released/in 2 reports
• regexp[.]newin 2 reports

Also named with it: CVE-2026-14814, CVE-2026-16301, CVE-2026-92883, CVE-2026-96951, CVE-2026-104935, CVE-2026-102764, CVE-2026-90970, CVE-2026-7767, CVE-2026-76519, CVE-2026-0322, CVE-2026-110264, CVE-2025-8088, CVE-2026-34073, CVE-2026-19478, CVE-2021-36260, CVE-2026-83498, CVE-2026-89078, CVE-2026-93577