{"metadata": {"vulnerability": "CVE-2026-84739", "count": 25, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-02T08:35:53.127Z", "date_only": false, "value": "2026-09-02T08:35:53.127Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-84739", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1225", "record": "CERTFR-2026-AVI-1225", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1225", "record": "CERTFR-2026-AVI-1225", "field": "last_revision_date"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1225", "record": "CERTFR-2026-AVI-1225", "field": "initial_release_date"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1225", "record": "CERTFR-2026-AVI-1225", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-24T08:00:45Z", "date_only": false, "value": "2026-09-24T08:00:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-vulnerabilities-gitlab-patch-immediately", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "a6ed9270-7c4f-4590-8e56-71b142790aed", "url": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-vulnerabilities-gitlab-patch-immediately"}, {"timestamp": "2026-09-24T09:45:02.136Z", "date_only": false, "value": "2026-09-24T09:45:02.136894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bearstech.com/post/3mwaxu3wkvl2a", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "69e8de3e-aa7d-4eac-ad66-e29dc77aae2e", "content": "Toutes nos instances GitLab sont \u00e0 jour en version 19.4.1 depuis hier soir \u00e0 22h.\n\nIl faut mettre \u00e0 jour rapidement : cette nouvelle version corrige 2 CVE \u00e9valu\u00e9es \u00e0 9,9 (CVE-2026-93577 et CVE-2026-84739).\n\nEn savoir plus sur nos offres \ud83d\udc47", "url": "https://bsky.app/profile/bearstech.com/post/3mwaxu3wkvl2a"}, {"timestamp": "2026-09-24T13:35:19.521Z", "date_only": false, "value": "2026-09-24T13:35:19.521379Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbepv7amn2m", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "d9eb0ee7-9d11-4884-8329-ff96e270c762", "content": "\ud83d\udd17 CVE : CVE-2026-10518, CVE-2026-4523, CVE-2026-84739, CVE-2026-89078, CVE-2026-8937, CVE-2026-92470, CVE-2026-92529, CVE-2026-92530, CVE-2026-92628, CVE-2026-92874, CVE-2026-93577", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbepv7amn2m"}, {"timestamp": "2026-09-29T09:34:28.011Z", "date_only": false, "value": "2026-09-29T09:34:28.011Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84739", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-29T09:34:28.011Z", "date_only": false, "value": "2026-09-29T09:34:28.011Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2026-84739", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-29T09:47:13.622Z", "date_only": false, "value": "2026-09-29T09:47:13.622179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mwnkcmdj752y", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "5bfc22f7-fd8d-4356-afca-94f9f44989c3", "content": "CVE-2026-84739: GitLab patched a cross-site scripting flaw in the merge request diff viewer of GitLab CE/EE that let an authenticated user run JavaScript in another user's session. Fixed in 19.2.7, 19.3.3 and 19.4.1. No exploitation confirmed.", "url": "https://bsky.app/profile/suriq.io/post/3mwnkcmdj752y"}, {"timestamp": "2026-09-29T10:17:12Z", "date_only": false, "value": "2026-09-29T10:17:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HRJ5-QWX9-F2Q7", "record": "GHSA-HRJ5-QWX9-F2Q7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-29T10:17:12.820Z", "date_only": false, "value": "2026-09-29T10:17:12.820", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84739", "record": "FKIE_CVE-2026-84739", "field": "published"}, {"timestamp": "2026-09-29T11:11:36.674Z", "date_only": false, "value": "2026-09-29T11:11:36.674015Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/26ior2htadhdv", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "b2890e41-0a69-442a-8028-2251b5ed79bd", "content": "CVE-2026-84739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab\nCVE ID : CVE-2026-84739\n \n Published : Sept. 29, 2026, 10:17 a.m. | 13\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all vers...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/26ior2htadhdv"}, {"timestamp": "2026-09-29T12:31:30Z", "date_only": false, "value": "2026-09-29T12:31:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HRJ5-QWX9-F2Q7", "record": "GHSA-HRJ5-QWX9-F2Q7", "field": "published"}, {"timestamp": "2026-09-29T12:31:30Z", "date_only": false, "value": "2026-09-29T12:31:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HRJ5-QWX9-F2Q7", "record": "GHSA-HRJ5-QWX9-F2Q7", "field": "modified"}, {"timestamp": "2026-09-29T13:35:41.779Z", "date_only": false, "value": "2026-09-29T13:35:41.779075Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnx34ls7o2c", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "e5cb71e7-11d3-46c8-9f88-8d6a91700cce", "content": "\ud83d\udfe0 CVE-2026-84739 - High (8.7)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84739/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnx34ls7o2c"}, {"timestamp": "2026-09-29T15:04:27.633Z", "date_only": false, "value": "2026-09-29T15:04:27.633751Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84739", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-29T15:04:27.633Z", "date_only": false, "value": "2026-09-29T15:04:27.633751Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84739", "record": "FKIE_CVE-2026-84739", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-29T15:04:40.962Z", "date_only": false, "value": "2026-09-29T15:04:40.962Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-84739", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-29T15:04:40.962Z", "date_only": false, "value": "2026-09-29T15:04:40.962Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84739", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-05T17:06:09.640Z", "date_only": false, "value": "2026-10-05T17:06:09.640", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84739", "record": "FKIE_CVE-2026-84739", "field": "lastModified"}, {"timestamp": "2026-10-06T12:10:11.458Z", "date_only": false, "value": "2026-10-06T12:10:11.458Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2026-84739", "record": "BIT-GITLAB-2026-84739", "field": "published"}, {"timestamp": "2026-10-06T12:12:21.709Z", "date_only": false, "value": "2026-10-06T12:12:21.709Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2026-84739", "record": "BIT-GITLAB-2026-84739", "field": "modified"}, {"timestamp": "2026-10-06T18:37:07.394Z", "date_only": false, "value": "2026-10-06T18:37:07.394767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxa36lnayx2q", "record": "CVE-2026-84739", "field": "creation_timestamp", "uuid": "666a7cdd-361f-4aad-995a-a30642783b10", "content": "\ud83d\udccc CVE-2026-84739 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under ... https://www.cyberhub.blog/cves/CVE-2026-84739", "url": "https://bsky.app/profile/cyberhub.blog/post/3mxa36lnayx2q"}]}