{"vulnerability": "CVE-2026-21391", "sightings": [{"uuid": "734f6eec-247c-4431-9787-a1379c044da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4mojdw4nqgh7w", "content": "CVE-2026-21391 - Improper Claim Validation in PingAM OIDC Provider\nCVE ID : CVE-2026-21391\n \n Published : Sept. 14, 2026, 11:18 a.m. | 34\u00a0minutes ago\n \n Description : An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or pro...", "creation_timestamp": "2026-09-14T12:33:20.577951Z"}, {"uuid": "a0318e95-9370-4dd5-abdd-a87b0e56bdb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21391", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rcze6a2f", "content": "CVE-2026-21391 - pingam\nPingAM does not correctly validate certain requests, allowing a crafted request to change the information placed in a login token. This can let an attacker pretend to be another\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pingam #pingidentity #CVE #infosec", "creation_timestamp": "2026-09-14T13:30:05.403180Z"}, {"uuid": "9e117546-6b28-495f-906d-8b3b7c86f6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21391", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvibtrbp562y", "content": "\ud83d\udea8 CVE-2026-21391 \u2014 CVSS 9.5 CRITICAL\n\nAn improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-21391\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T14:07:14.826620Z"}]}