GitLab CE/EE — stored XSS in analytics dashboards (CVSS 8.7); cited as dropped from § 2
cve · CVE-2026-6073
Coverage timeline
1
first 2026-05-17 → last 2026-05-17
Briefs
1
1 distinct
Sources cited
17
12 hosts
Sections touched
0
—
Co-occurring entities
0
no co-occurrence
Story timeline
- 2026-05-17CTI Daily Brief — 2026-05-17
Source distribution
- attack.mitre.org5 (29%)
- advisories.ncsc.nl2 (12%)
- bitdefender.com1 (6%)
- blog.powerdns.com1 (6%)
- docs.gitlab.com1 (6%)
- maine.gov1 (6%)
- prnewswire.com1 (6%)
- proofpoint.com1 (6%)
- other4 (24%)
External references
All cited sources (17)
- advisories.ncsc.nlprimaryinlineNCSC-NL NCSC-2026-0161, 2026-05-15https://advisories.ncsc.nl/csaf/v2/2026/ncsc-2026-0161.json
- advisories.ncsc.nlprimaryinlineNCSC-NL advisory NCSC-2026-0168https://advisories.ncsc.nl/advisory?id=NCSC-2026-0168
- attack.mitre.orginlineT1072https://attack.mitre.org/techniques/T1072/
- attack.mitre.orginlineT1195.002https://attack.mitre.org/techniques/T1195/002/
- attack.mitre.orginlineT1204https://attack.mitre.org/techniques/T1204/
- attack.mitre.orginlineT1547https://attack.mitre.org/techniques/T1547/
- attack.mitre.orginlineT1555https://attack.mitre.org/techniques/T1555/
- bitdefender.cominlineBitdefender Business Insights, 2026-05-13https://www.bitdefender.com/en-us/blog/businessinsights/famoussparrow-apt-targets-azerbaijani-oil-gas-industry
- blog.powerdns.cominlinePowerDNS, 2026-06-25https://blog.powerdns.com/2026/06/25/powerdns-security-advisory-2026-08-for-powerdns-recursor
- docs.gitlab.cominlineGitLab 19.0.1https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-0-1-released/
- maine.govinlineMaine AG filinghttps://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d6729ef2-7bb3-42d3-abdd-99a1dd8f2415.html
- prnewswire.cominlinePR Newswire substitute noticehttps://www.prnewswire.com/news-releases/carnival-corporation-notice-of-data-breach-302783524.html
- proofpoint.cominlineProofpoint, 2026-06-15https://www.proofpoint.com/us/blog/threat-insight/dont-fear-repo-unkdeaddrop-phishing-campaign-targets-developers-steal
- sentinelone.cominlineSentinelOne, 2026-05-15https://www.sentinelone.com/blog/living-off-the-pipeline-defending-against-ci-cd-subversion/
- thehackernews.cominlineThe Hacker News, 2026-06-16https://thehackernews.com/2026/06/north-korean-hackers-are-turning.html
- veeam.cominlineVeeam KB4852https://www.veeam.com/kb4852
- wid.cert-bund.deinlineBSI WID-SEC-2026-2091https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2091
Items in briefs about GitLab CE/EE — stored XSS in analytics dashboards (CVSS 8.7); cited as dropped from § 2
No parsed item heading or body matches this entity yet. Items match by exact CVE id (for CVE entities), by lead-segment substring of the title in the item heading or body, or by a distinctive anchor token from the title appearing in the item heading. Coverage that lives inside a broader section (no per-item heading) is captured by the Story timeline above.