{"vulnerability": "cve-2026-84739", "sightings": [{"uuid": "69e8de3e-aa7d-4eac-ad66-e29dc77aae2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/bearstech.com/post/3mwaxu3wkvl2a", "content": "Toutes nos instances GitLab sont \u00e0 jour en version 19.4.1 depuis hier soir \u00e0 22h.\n\nIl faut mettre \u00e0 jour rapidement : cette nouvelle version corrige 2 CVE \u00e9valu\u00e9es \u00e0 9,9 (CVE-2026-93577 et CVE-2026-84739).\n\nEn savoir plus sur nos offres \ud83d\udc47", "creation_timestamp": "2026-09-24T09:45:02.136894Z"}, {"uuid": "d9eb0ee7-9d11-4884-8329-ff96e270c762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwbepv7amn2m", "content": "\ud83d\udd17 CVE : CVE-2026-10518, CVE-2026-4523, CVE-2026-84739, CVE-2026-89078, CVE-2026-8937, CVE-2026-92470, CVE-2026-92529, CVE-2026-92530, CVE-2026-92628, CVE-2026-92874, CVE-2026-93577", "creation_timestamp": "2026-09-24T13:35:19.521379Z"}, {"uuid": "a6ed9270-7c4f-4590-8e56-71b142790aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-vulnerabilities-gitlab-patch-immediately", "content": "", "creation_timestamp": "2026-09-24T08:00:45.000000Z"}, {"uuid": "5bfc22f7-fd8d-4356-afca-94f9f44989c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mwnkcmdj752y", "content": "CVE-2026-84739: GitLab patched a cross-site scripting flaw in the merge request diff viewer of GitLab CE/EE that let an authenticated user run JavaScript in another user's session. Fixed in 19.2.7, 19.3.3 and 19.4.1. No exploitation confirmed.", "creation_timestamp": "2026-09-29T09:47:13.622179Z"}, {"uuid": "b2890e41-0a69-442a-8028-2251b5ed79bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/26ior2htadhdv", "content": "CVE-2026-84739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab\nCVE ID : CVE-2026-84739\n \n Published : Sept. 29, 2026, 10:17 a.m. | 13\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all vers...", "creation_timestamp": "2026-09-29T11:11:36.674015Z"}, {"uuid": "e5cb71e7-11d3-46c8-9f88-8d6a91700cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84739", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwnx34ls7o2c", "content": "\ud83d\udfe0 CVE-2026-84739 - High (8.7)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.7, 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84739/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-29T13:35:41.779075Z"}]}