CVE-2026–10086: Cross-Site Scripting in GitLab EE Analytics Dashboard

When developer permissions become enough to attack another user’s session