CVE-2026-31382

• Gainsight/Assist

  cpe:2.3:a:gainsight:assist:-:*:*:*:*:*:*:*

No patches discovered yet.

AI mechanics synthesis has not run for this CVE yet.

• communities.gainsight.com/community-news-2/recent-gainsight-assist-plugin-remediations-cve-2026-31381-and-cve-2026-31382-30587nvdVendor Advisory
• www.rapid7.com/blog/post/ve-cve-2026-31381-cve-2026-31382-gainsight-assist-information-disclosure-xss-fixed/nvdThird Party AdvisoryExploit

• Tables Turn on 'The Gentlemen' RaaS Gang With Data Leak
  Dark Reading · May 13, 2026
• Thus Spoke…The Gentlemen
  Check Point Research · May 13, 2026
• 20 Leaders Who Built the CISO Era: 2 Decades of Change
  Dark Reading · May 12, 2026
• Is the SOC Obsolete, and We Just Haven’t Admitted It Yet?
  SecurityWeek · May 12, 2026
• Double Canvas breach acknowledged as ShinyHunters sets new pay-or-leak deadline
  The Register Security · May 11, 2026
• BWH Hotels guests warned after reservation data checks out with cybercrooks
  The Register Security · May 11, 2026
• Hackers Use AI for Exploit Development, Attack Automation
  Dark Reading · May 11, 2026
• Your Purple Team Isn't Purple — It's Just Red and Blue in the Same Room
  The Hacker News · May 11, 2026
• The questionnaire-based TPRM model is broken, and TrustCloud has a fix
  Help Net Security · May 11, 2026
• Smart Glasses for the Authorities
  Schneier on Security · May 7, 2026
• Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion
  SecurityWeek · May 7, 2026
• Iran cybersnoops still LARPing as ransomware crooks in espionage ops
  The Register Security · May 6, 2026
• MuddyWater hackers use Chaos ransomware as a decoy in attacks
  BleepingComputer · May 6, 2026
• Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware
  Rapid7 Blog · May 6, 2026
• MuddyWater Uses Microsoft Teams to Steal Credentials in False Flag Ransomware Attack
  The Hacker News · May 6, 2026
• ServiceNow clears agents for landing with new AI control tower
  The Register Security · May 5, 2026
• Vimeo data breach exposes personal information of 119,000 people
  BleepingComputer · May 5, 2026
• We Scanned 1 Million Exposed AI Services. Here's How Bad the Security Actually Is
  The Hacker News · May 5, 2026
• Cybersecurity jobs available right now: May 5, 2026
  Help Net Security · May 5, 2026
• They don’t hack, they borrow: How fraudsters target credit unions
  BleepingComputer · May 4, 2026
• OpenAI Rolls Out Advanced Security for ChatGPT Accounts
  SecurityWeek · May 4, 2026
• ChatGPT advanced account security adds passkeys and hardware keys
  Help Net Security · May 3, 2026
• TeamPCP Supply Chain Campaign: Update 008 - 26-Day Pause Ends with Three Concurrent Compromises (Checkmarx KICS, Bitwarden CLI Cascade, xinference PyPI), CanisterSprawl npm Worm Identified, and Tier 1 Coverage Returns, (Mon, Apr 27th)
  SANS Internet Storm Center · Apr 27, 2026
• UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW Malware
  The Hacker News · Apr 23, 2026
• Ransomware Negotiator Pleads Guilty to BlackCat Scheme
  Dark Reading · Apr 21, 2026
• Project Glasswing and the Next Challenge for Defenders: Turning Faster Discovery into Faster Action
  Rapid7 Blog · Apr 20, 2026
• The Increasing Role of AI in Vulnerability Research
  Wordfence Blog · Apr 10, 2026