https://vulnerability.circl.lu/sightings/feed 2026-09-10T21:56:39.734934+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5f743faf-1b83-424d-9be5-ac2dcb3821cd/export 2026-09-10T21:56:39.756893+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5f743faf-1b83-424d-9be5-ac2dcb3821cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c6rxygwlblj5a", "content": "CVE-2026-88770 - Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts\nCVE ID : CVE-2026-88770\n \n Published : 10. September 2026 07:18 | 19\u00a0Minuten ago\n \n Description : A flaw was found in the Device Authorization Grant f...", "creation_timestamp": "2026-09-10T08:05:52.069690Z"} 2026-09-10T08:05:52.069690+00:00 https://vulnerability.circl.lu/sighting/caa5910b-2001-4413-8db1-dee22b005856/export 2026-09-10T21:56:39.758866+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "caa5910b-2001-4413-8db1-dee22b005856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv5kmvecu42p", "content": "Keycloak's device login flow hands fresh tokens to a brute-force-locked account, if an attacker already holds a session (CVE-2026-88770).\n\nNo fix published yet.\n\nDisable the device grant on clients that do not use it.", "creation_timestamp": "2026-09-10T07:45:11.398391Z"} 2026-09-10T07:45:11.398391+00:00