CVE-2026-14357

creationtimestamp| type| source ---|---|--- 2026-09-02 06:54:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hu5ayvdopra6y 2026-09-02 07:01:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mujeibneqd2a...

CVE-2026-84309

creationtimestamp| type| source ---|---|--- 2026-09-02 05:32:13+00:00| seen| https://gist.github.com/alon710/d55e9844c43e78f042db258784a22ae0...

CVE-2026-3851

creationtimestamp| type| source ---|---|--- 2026-09-02 05:19:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/csalzd224pyc5...

CVE-2026-84311

creationtimestamp| type| source ---|---|--- 2026-09-02 04:31:59+00:00| seen| https://gist.github.com/alon710/98eba2f66fc3c02fefd49fa02ee5009a...

CVE-2026-84310

creationtimestamp| type| source ---|---|--- 2026-09-02 03:31:51+00:00| seen| https://gist.github.com/alon710/3521e58613b990dddef5bf0335b08c88...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

EUVD-2026-69800

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968

Keycloak identity management service has a flaw in the first-broker-login flow that enables account takeover via social identity provider linking. The verification proof (described in the CVE list as a cross-session email verification proof ) is not strictly bound to the specific upstream identit...

CVE-2026-82968 Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968 Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-84356

creationtimestamp| type| source ---|---|--- 2026-09-02 01:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/54lnl25wagkbs 2026-09-02 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:36+00:00| seen|...

CVE-2026-84359

creationtimestamp| type| source ---|---|--- 2026-09-02 01:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gnsbws4je7oxc 2026-09-02 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:03+00:00| seen|...

CVE-2023-41564

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-03 00:00:54+00:00| published-proof-of-concept| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-18 04:00:08+00:00| seen|...

CVE-2025-52399

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:08+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:56+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...

CVE-2026-84306

creationtimestamp| type| source ---|---|--- 2026-09-02 00:32:16+00:00| seen| https://gist.github.com/alon710/f0327fbec515b265e501091e4bb41d35 2026-09-15 15:00:05+00:00| seen| https://t.me/bdufstecru/3437 2026-09-16 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3437...

CVE-2026-84327

creationtimestamp| type| source ---|---|--- 2026-09-02 00:12:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117198551537914778 2026-09-02 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:51+00:00| seen|...

CVE-2026-82968: Authorization Bypass Through User-Controlled Key

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

PT-2026-84590

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-73701

creationtimestamp| type| source ---|---|--- 2026-09-01 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muikocykxa2m 2026-09-03 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mum3wxtvhx2w...