EUVD-2026-69800

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968 Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-84356

creationtimestamp| type| source ---|---|--- 2026-09-02 01:35:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/54lnl25wagkbs 2026-09-02 04:47:15+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:36+00:00| seen|...

CVE-2026-84359

creationtimestamp| type| source ---|---|--- 2026-09-02 01:17:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gnsbws4je7oxc 2026-09-02 04:47:20+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:03+00:00| seen|...

CVE-2023-41564

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:11+00:00| seen| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-03 00:00:54+00:00| published-proof-of-concept| Telegram/LQpXoSxiIMyLvjThS3pKr95lLo1oYU2fC4knuXd1KuqMh5Y 2026-09-18 04:00:08+00:00| seen|...

CVE-2025-52399

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:08+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:56+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...

CVE-2026-84306

creationtimestamp| type| source ---|---|--- 2026-09-02 00:32:16+00:00| seen| https://gist.github.com/alon710/f0327fbec515b265e501091e4bb41d35 2026-09-15 15:00:05+00:00| seen| https://t.me/bdufstecru/3437 2026-09-16 00:00:29+00:00| published-proof-of-concept| https://t.me/bdufstecru/3437...

CVE-2026-84327

creationtimestamp| type| source ---|---|--- 2026-09-02 00:12:56+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117198551537914778 2026-09-02 04:46:35+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260902 2026-09-04 04:45:51+00:00| seen|...

CVE-2026-82968: Authorization Bypass Through User-Controlled Key

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

PT-2026-84590

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-73701

creationtimestamp| type| source ---|---|--- 2026-09-01 23:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muikocykxa2m 2026-09-03 09:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mum3wxtvhx2w...

CVE-2026-73700

creationtimestamp| type| source ---|---|--- 2026-09-01 23:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muik4ietaf22...

CVE-2026-83548

creationtimestamp| type| source ---|---|--- 2026-09-01 20:54:15+00:00| seen| https://bsky.app/profile/pylos.co/post/3muicjl43oc2p 2026-09-01 22:07:15+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3muigm47pu32f 2026-09-02 02:45:30+00:00| seen|...

CVE-2026-9622

creationtimestamp| type| source ---|---|--- 2026-09-01 20:12:01+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muia62ld6v2b...

CVE-2026-9624

creationtimestamp| type| source ---|---|--- 2026-09-01 20:12:01+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3muia62ld6v2b...

CVE-2020-14166

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:47+00:00| seen| https://t.me/hackingAttack/4061 2026-09-02 01:03:24+00:00| seen| https://t.me/hackingAttack/4061 2026-09-08 12:00:05+00:00| published-proof-of-concept| https://t.me/hackingAttack/4061 2026-09-09 00:00:31+00:00|...

CVE-2021-31584

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:45+00:00| seen| https://t.me/hackingAttack/6161 2026-09-02 01:03:20+00:00| seen| https://t.me/hackingAttack/6161 2026-09-08 10:00:07+00:00| published-proof-of-concept| https://t.me/hackingAttack/6161 2026-09-09 00:00:34+00:00|...

GHSA-P44J-XRQG-4XRR

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:40+00:00| seen| https://t.me/hackingAttack/11108 2026-09-02 01:03:16+00:00| seen| https://t.me/hackingAttack/11108 2026-09-08 05:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/11108 2026-09-09 00:00:41+00:00|...