CVE-2026-77405

creationtimestamp| type| source ---|---|--- 2026-09-16 16:11:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvnjpjb7uq2f 2026-09-16 17:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvnpa5vwb724...

CVE-2026-19607 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

EUVD-2026-80855

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607

A flaw in the first-broker-login flow of the keycloak-services component in Red Hat build of Keycloak allows an attacker to register a matching username on an external identity provider, triggering a username collision that locks out the legitimate user. The root cause is insufficient validation ...

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-76191

creationtimestamp| type| source ---|---|--- 2026-09-16 14:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvncrepjnz24...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-40854

creationtimestamp| type| source ---|---|--- 2026-09-16 12:15:06+00:00| seen| https://cert.pl/en/posts/2026/09/CVE-2026-40854 2026-09-16 14:35:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117281215010783373 2026-09-17 11:39:40+00:00| seen|...

CVE-2026-83350

creationtimestamp| type| source ---|---|--- 2026-09-16 12:05:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3xn5wdq2t 2026-09-23 09:15:32+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-14917

creationtimestamp| type| source ---|---|--- 2026-09-16 10:30:31+00:00| seen| https://bsky.app/profile/suriq.io/post/3mvmwo2xzak22...

CVE-2026-92358

A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is created to validate the link. However, this proof is not properly cleared after the link is established or when the user later manually remov...

CVE-2026-91934

creationtimestamp| type| source ---|---|--- 2026-09-16 05:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmfcxwtku25...

CVE-2026-87886

creationtimestamp| type| source ---|---|--- 2026-09-16 02:27:45+00:00| seen| https://bsky.app/profile/abijita.bsky.social/post/3mvm3osvhv32w 2026-09-16 03:09:26+00:00| seen| https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvm5zerud22j 2026-09-16 03:15:25+00:00| seen|...

CVE-2026-87223

creationtimestamp| type| source ---|---|--- 2026-09-16 02:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm3b3eyz222 2026-09-23 08:46:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 10:07:07+00:00| seen|...

CVE-2026-87175

creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xfq55j2j 2026-09-16 06:50:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmkdxpfdo2t 2026-09-23 08:48:16+00:00| seen|...

CVE-2026-87128

creationtimestamp| type| source ---|---|--- 2026-09-16 02:13:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2w5cy7u2y 2026-09-16 06:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmja4pyg62w 2026-09-22 11:07:06+00:00| seen|...

CVE-2026-83260

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlubb662a2f 2026-09-16 01:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyzkn7zf2p 2026-09-23 09:18:15+00:00| seen|...

CVE-2026-83232

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluazdmr42p 2026-09-16 03:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmabzzsr22y 2026-09-23 09:19:04+00:00| seen|...

CVE-2026-83229

creationtimestamp| type| source ---|---|--- 2026-09-16 00:14:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvluarjjeo24 2026-09-16 01:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyhqyxq42b 2026-09-23 09:19:10+00:00| seen|...