{"cve_id":"CVE-2026-55592","title":"Dashy <= 4.3.6 - Reflected XSS via Workspace","severity":"medium","actively_exploited":false,"patterns":["/workspace"],"events":247,"unique_ips":196,"actors":[{"ip":"83.168.106.26","events":7,"country_code":"PL","country":"Poland","org":"SkyPass Solutions Sp. z.o.o.","rdns":"hosted-by.skillhost.pl","scanner_tag":null},{"ip":"47.253.5.130","events":5,"country_code":"US","country":"United States","org":"Alibaba (US) Technology Co., Ltd.","rdns":"","scanner_tag":null},{"ip":"110.35.80.116","events":4,"country_code":"ID","country":"Indonesia","org":"PT. NAP Info Lintas Nusa","rdns":"IP-80-116.napinfo.net","scanner_tag":null},{"ip":"212.127.91.32","events":4,"country_code":"PL","country":"Poland","org":"Korbank S. A.","rdns":"","scanner_tag":null},{"ip":"209.99.188.240","events":3,"country_code":"CH","country":"Switzerland","org":"SKN Subnet & Telecom Ltd","rdns":"","scanner_tag":null},{"ip":"194.233.81.74","events":3,"country_code":"SG","country":"Singapore","org":"Contabo Asia Private Limited","rdns":"vmi3404868.contaboserver.net","scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"}},{"ip":"101.47.8.187","events":3,"country_code":"SG","country":"Singapore","org":"Byteplus Pte. Ltd.","rdns":"","scanner_tag":null},{"ip":"101.36.104.242","events":3,"country_code":"JP","country":"Japan","org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","rdns":"","scanner_tag":null},{"ip":"185.177.72.24","events":3,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"79.76.58.113","events":2,"country_code":"SE","country":"Sweden","org":"Oracle Corporation","rdns":"","scanner_tag":null},{"ip":"89.126.211.166","events":2,"country_code":"UZ","country":"Uzbekistan","org":"Uzbektelekom Joint Stock Company","rdns":"","scanner_tag":null},{"ip":"167.86.80.37","events":2,"country_code":"DE","country":"Germany","org":"Contabo GmbH","rdns":"vmi3394524.contaboserver.net","scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"}},{"ip":"34.131.138.150","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"150.138.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"81.226.129.67","events":2,"country_code":"SE","country":"Sweden","org":"Telia Company AB","rdns":"81-226-129-67-no2662.tbcn.telia.com","scanner_tag":null},{"ip":"34.131.113.161","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"161.113.131.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.116.122.69","events":2,"country_code":"AU","country":"Australia","org":"Google LLC","rdns":"69.122.116.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"69.2.161.137","events":2,"country_code":"US","country":"United States","org":"Easton Utilities Commission","rdns":"137.161.2.69.wisp.goeaston.net","scanner_tag":null},{"ip":"185.177.72.205","events":2,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"212.127.90.201","events":2,"country_code":"PL","country":"Poland","org":"Korbank S. A.","rdns":"","scanner_tag":null},{"ip":"34.180.2.60","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"60.2.180.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.154.166.70","events":2,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"70.166.154.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"62.171.165.150","events":2,"country_code":"FR","country":"France","org":"Contabo GmbH","rdns":"vmi3214813.contaboserver.net","scanner_tag":{"key":"contabo","label":"Contabo","category":"hosting_provider","url":"https://contabo.com/"}},{"ip":"34.93.160.21","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"21.160.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"8.231.110.57","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"57.110.231.8.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.17.65.209","events":2,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"209.65.17.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.189.40.125","events":2,"country_code":"AU","country":"Australia","org":"Google LLC","rdns":"125.40.189.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.130.84.91","events":2,"country_code":"CA","country":"Canada","org":"Google LLC","rdns":"91.84.130.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.17.124.23","events":2,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"23.124.17.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"8.231.101.34","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"34.101.231.8.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"8.231.91.50","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"50.91.231.8.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.93.49.143","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"143.49.93.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"163.7.1.156","events":2,"country_code":"ID","country":"Indonesia","org":"Byteplus Pte. Ltd.","rdns":"","scanner_tag":null},{"ip":"120.48.32.130","events":2,"country_code":"CN","country":"China","org":"Beijing Baidu Netcom Science and Technology Co., Ltd.","rdns":"","scanner_tag":null},{"ip":"8.231.93.215","events":2,"country_code":"IN","country":"India","org":"Google LLC","rdns":"215.93.231.8.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"104.223.52.17","events":1,"country_code":"US","country":"United States","org":"HostPapa","rdns":"","scanner_tag":null},{"ip":"34.20.206.1","events":1,"country_code":"US","country":"United States","org":"Google LLC","rdns":"1.206.20.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"223.85.251.55","events":1,"country_code":"CN","country":"China","org":"China Mobile Communications Group Co., Ltd.","rdns":"","scanner_tag":null},{"ip":"34.165.229.19","events":1,"country_code":"IL","country":"Israel","org":"Google LLC","rdns":"19.229.165.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"154.36.166.105","events":1,"country_code":"HK","country":"Hong Kong","org":"NetLab Global","rdns":"","scanner_tag":null},{"ip":"34.180.44.100","events":1,"country_code":"IN","country":"India","org":"Google LLC","rdns":"100.44.180.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.165.229.28","events":1,"country_code":"IL","country":"Israel","org":"Google LLC","rdns":"28.229.165.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"34.154.250.14","events":1,"country_code":"IT","country":"Italy","org":"Google LLC","rdns":"14.250.154.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"114.215.202.153","events":1,"country_code":"CN","country":"China","org":"Hangzhou Alibaba Advertising Co.,Ltd.","rdns":"","scanner_tag":null},{"ip":"134.209.255.30","events":1,"country_code":"DE","country":"Germany","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"156.59.222.169","events":1,"country_code":"MY","country":"Malaysia","org":"Zenlayer Inc","rdns":"","scanner_tag":null},{"ip":"34.180.56.27","events":1,"country_code":"IN","country":"India","org":"Google LLC","rdns":"27.56.180.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"8.231.99.92","events":1,"country_code":"IN","country":"India","org":"Google LLC","rdns":"92.99.231.8.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"101.47.15.119","events":1,"country_code":"SG","country":"Singapore","org":"Byteplus Pte. Ltd.","rdns":"","scanner_tag":null},{"ip":"34.130.141.173","events":1,"country_code":"CA","country":"Canada","org":"Google LLC","rdns":"173.141.130.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"35.252.24.12","events":1,"country_code":"IL","country":"Israel","org":"Google LLC","rdns":"12.24.252.35.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}}],"top_asns":[{"asn":396982,"org":"Google LLC","events":140,"ips":125},{"asn":45102,"org":"Alibaba (US) Technology Co., Ltd.","events":9,"ips":5},{"asn":51167,"org":"Contabo GmbH","events":8,"ips":6},{"asn":202520,"org":"SkyPass Solutions Sp. z.o.o.","events":7,"ips":1},{"asn":211590,"org":"Bucklog SARL","events":7,"ips":4},{"asn":150436,"org":"Byteplus Pte. Ltd.","events":6,"ips":3},{"asn":35179,"org":"Korbank S. A.","events":6,"ips":2},{"asn":135377,"org":"UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED","events":5,"ips":3},{"asn":17727,"org":"PT. NAP Info Lintas Nusa","events":4,"ips":1},{"asn":402253,"org":"SKN Subnet & Telecom Ltd","events":4,"ips":2}],"fingerprints":{"ja4h":["ge11nn0700_c5a94e7539c9","ge11nn14en_068ebe3632ec","ge11nn0700_5a5182d16ecb","ge11nn0700_a1f20e5bfd9b","ge11nn0500_9af7e0472034","ge11nn0300_042112399351"],"ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i170900_5b57614c22b0_78e6aca7449b","t13i3111h2_e8f1e7e78f70_8d633dac7124"]},"sample_paths":["/.idea/workspace.xml","/workspace/%2eenv","/config/workspace%2ejs","/workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php","/workspace/","/%2ejenkins/workspace/","/workspace%2ejson"],"timeline":[{"day":"2026-06-29","events":5,"ips":5},{"day":"2026-06-30","events":150,"ips":135},{"day":"2026-07-01","events":21,"ips":19},{"day":"2026-07-02","events":15,"ips":13},{"day":"2026-07-03","events":16,"ips":14},{"day":"2026-07-04","events":18,"ips":18},{"day":"2026-07-05","events":14,"ips":13},{"day":"2026-07-06","events":8,"ips":8}],"window_hours":168}