{"metadata": {"vulnerability": "CVE-2026-96806", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-09-23T16:52:57.591Z", "date_only": false, "value": "2026-09-23T16:52:57.591Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-96806", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T21:40:20.555Z", "date_only": false, "value": "2026-10-15T21:40:20.555Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-96806", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T22:21:19Z", "date_only": false, "value": "2026-10-15T22:21:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2VV4-MGC4-GRM2", "record": "GHSA-2VV4-MGC4-GRM2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T22:21:19.090Z", "date_only": false, "value": "2026-10-15T22:21:19.090", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96806", "record": "FKIE_CVE-2026-96806", "field": "published"}, {"timestamp": "2026-10-15T22:23:44.514Z", "date_only": false, "value": "2026-10-15T22:23:44.514210Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117447263784101476", "record": "CVE-2026-96806", "field": "creation_timestamp", "uuid": "c66742b6-8cc4-4d63-8ff0-9018fe7b5199", "content": "CVE-2026-96806 Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session \u2014 JWTMiddleware mints an unrevoked replacement token The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but `KeycloakJWTMiddleware` then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: after a user logs out, anyone with later access to the same browser (for example on a shared workstation) can continue to act as that user.\nUsers of apache-airflow-providers-keycloak are recommended to upgrade to apache-airflow-providers-keycloak 0.11.1 or later.\nhttps://www.cve.org/CVERecord?id=CVE-2026-96806https://github.com/apache/airflow/pull/73695#ApacheSoftwareFoundation #ApacheAirflowKeycloakprovider#CVE_2026_96806#bot", "url": "https://infosec.exchange/users/cve/statuses/117447263784101476"}, {"timestamp": "2026-10-15T23:49:21.204Z", "date_only": false, "value": "2026-10-15T23:49:21.204782Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/fm5psyran32fy", "record": "CVE-2026-96806", "field": "creation_timestamp", "uuid": "756817fb-d2af-4c41-a35e-0c3fe9cd7198", "content": "CVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session \u2014 JWTMiddleware mints an unrevoked replacement token", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/fm5psyran32fy"}, {"timestamp": "2026-10-16T00:16:36.174Z", "date_only": false, "value": "2026-10-16T00:16:36.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-96806", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T00:31:59Z", "date_only": false, "value": "2026-10-16T00:31:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2VV4-MGC4-GRM2", "record": "GHSA-2VV4-MGC4-GRM2", "field": "published"}, {"timestamp": "2026-10-16T03:39:05.417Z", "date_only": false, "value": "2026-10-16T03:39:05.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-96806", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:50:09.654Z", "date_only": false, "value": "2026-10-16T14:50:09.654727Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96806", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-16T14:50:09.654Z", "date_only": false, "value": "2026-10-16T14:50:09.654727Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96806", "record": "FKIE_CVE-2026-96806", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-16T14:50:50.600Z", "date_only": false, "value": "2026-10-16T14:50:50.600Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-96806", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-16T14:50:50.600Z", "date_only": false, "value": "2026-10-16T14:50:50.600Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-96806", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:20:39.130Z", "date_only": false, "value": "2026-10-16T15:20:39.130", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-96806", "record": "FKIE_CVE-2026-96806", "field": "lastModified"}, {"timestamp": "2026-10-16T15:38:29Z", "date_only": false, "value": "2026-10-16T15:38:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2VV4-MGC4-GRM2", "record": "GHSA-2VV4-MGC4-GRM2", "field": "modified"}]}