CVE-2026-110264 Checker — GitLab RCE Vulnerability Scanner

How it works

The worker fetches /assets/webpack/manifest.json, the login page, and API endpoints from the target server-side — no CORS restrictions.

Matches the webpack hash or Snowplow instance_version against 3,242 known hashes covering 1,100 GitLab releases (8.2.0–19.5.1).

All requests are GET-only. No files uploaded, no projects created, no exploit payload sent.

API

Use it as a JSON API from scripts, CI pipelines, or automation:

GET/api/check?target=<url>

curl -s "https://cve2026110264.com/api/check?target=https://gitlab.example.com" | jq .

POST/api/check

curl -s -X POST https://cve2026110264.com/api/check \
  -H "Content-Type: application/json" \
  -d '{"target":"https://gitlab.example.com"}' | jq .

Response

Field	Description
target	Normalized URL that was scanned
is_gitlab	`true` if the target is a GitLab instance
version	Detected version string, e.g. `"18.5.5"`
edition	`"CE"` or `"EE"`
method	How the version was identified
verdict.status	`VULNERABLE` / `PATCHED` / `UNKNOWN`
verdict.detail	Human-readable explanation
verdict.cvss	`10.0` if vulnerable, otherwise `null`
verdict.fixed_versions	Array of patched releases per branch

Rate limit: 5 requests / 60s per IP. Headers: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset.

Disclaimer
This tool is provided by Gen0Sec Inc. for authorized security testing and defensive purposes only. It performs passive, read-only version fingerprinting — no exploit code is sent to the target. Use of this tool against systems you do not own or have explicit authorization to test may violate applicable laws. Gen0Sec Inc. assumes no liability for misuse or for any damages resulting from the use of this tool. Results are informational and should be independently verified.

Data Usage
Requests are not logged, stored, or used for any purposes by Gen0Sec Inc. No target URLs, scan results, or user data are retained.