https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 10 Sep 2026 22:18:25 +0000 https://vulnerability.circl.lu/sighting/5f743faf-1b83-424d-9be5-ac2dcb3821cd/export {"uuid": "5f743faf-1b83-424d-9be5-ac2dcb3821cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c6rxygwlblj5a", "content": "CVE-2026-88770 - Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts\nCVE ID : CVE-2026-88770\n \n Published : 10. September 2026 07:18 | 19\u00a0Minuten ago\n \n Description : A flaw was found in the Device Authorization Grant f...", "creation_timestamp": "2026-09-10T08:05:52.069690Z"} {"uuid": "5f743faf-1b83-424d-9be5-ac2dcb3821cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/c6rxygwlblj5a", "content": "CVE-2026-88770 - Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts\nCVE ID : CVE-2026-88770\n \n Published : 10. September 2026 07:18 | 19\u00a0Minuten ago\n \n Description : A flaw was found in the Device Authorization Grant f...", "creation_timestamp": "2026-09-10T08:05:52.069690Z"} https://vulnerability.circl.lu/sighting/5f743faf-1b83-424d-9be5-ac2dcb3821cd/export Thu, 10 Sep 2026 08:05:52 +0000 https://vulnerability.circl.lu/sighting/caa5910b-2001-4413-8db1-dee22b005856/export {"uuid": "caa5910b-2001-4413-8db1-dee22b005856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv5kmvecu42p", "content": "Keycloak's device login flow hands fresh tokens to a brute-force-locked account, if an attacker already holds a session (CVE-2026-88770).\n\nNo fix published yet.\n\nDisable the device grant on clients that do not use it.", "creation_timestamp": "2026-09-10T07:45:11.398391Z"} {"uuid": "caa5910b-2001-4413-8db1-dee22b005856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88770", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mv5kmvecu42p", "content": "Keycloak's device login flow hands fresh tokens to a brute-force-locked account, if an attacker already holds a session (CVE-2026-88770).\n\nNo fix published yet.\n\nDisable the device grant on clients that do not use it.", "creation_timestamp": "2026-09-10T07:45:11.398391Z"} https://vulnerability.circl.lu/sighting/caa5910b-2001-4413-8db1-dee22b005856/export Thu, 10 Sep 2026 07:45:11 +0000