CVE-2026-92883Vulnerability
Reported by 3 independent sources · first reported by CERT-FR · last reported
Last reported 5 days ago
higher than 18% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More“… CVE-2026-85947, CVE-2026-85948, CVE-2026-85955, CVE-2026-85956, CVE-2026-9191 (Progress Software MarkLogic Server), CVE-2026-97229, CVE-2026-92883, CVE-2026-16301, CVE-2026-14814 (GitLab), CVE-2026-103521, CVE-2026-103522, CVE-2026-103523, CVE-2026-103524, CVE-2026-103526, CVE-2…”
-
GitLab Patches Max-Severity Vulnerability CVE-2026-97229“CVE-2026-92883 (CVSS score: 8.7) – A security flaw where an attacker can trick another user’s web browser into running malicious JavaScript code through a specially designed repository.”
-
GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code“CVE-2026-92883 (CVSS score: 8.7) - A cross-site scripting vulnerability that could allow an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a specially crafted repository.”
-
Multiples vulnérabilités dans GitLab (12 octobre 2026)“Référence CVE CVE-2026-92883”
Indicators reported together
named in the same reportsCopy this indicator · defanged
Also named with it: CVE-2026-14814, CVE-2026-16301, CVE-2026-97229, CVE-2026-90970, CVE-2026-34073, CVE-2021-36260, CVE-2026-83498, CVE-2026-74580, CVE-2026-85706, CVE-2026-79724, CVE-2026-85025, CVE-2026-81204, CVE-2026-103947, CVE-2026-103946, CVE-2026-106126, CVE-2026-100104, CVE-2026-100755, CVE-2026-101168, CVE-2026-103549
Thanks — we review every report.