{"vulnerability": "CVE-2026-100606", "sightings": [{"uuid": "c8fdc87b-f28d-447d-8de5-28c1e847eeca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo55r2q325", "content": "\ud83d\udea8 CVE-2026-100606 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 (Enterprise/platform mode with SSO enabled) contains an authentication bypass in the ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100606\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:07.077646Z"}, {"uuid": "21b38268-6617-4e8b-95f2-7ceffc2692cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100606", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6nxosl2l", "content": "CVE-2026-100606 - flowise\nWhen Flowise is set up with single sign\u2011on, an email address used for an invitation can be used to log in without the invitation token. Anyone who can sign in to the same SSO\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:05.028608Z"}]}