{"vulnerability": "cve-2026-100607", "sightings": [{"uuid": "d3d1e3a3-5b7f-4a41-95da-ea5a22ff1708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwgo5fqepx24", "content": "\ud83d\udea8 CVE-2026-100607 \u2014 CVSS 9.2 CRITICAL\n\nFlowise through 3.1.4 resolves SSO and local-password users solely by email without storing provider or sub...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-100607\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-26T16:07:15.240879Z"}, {"uuid": "e4bba050-7931-482b-974e-0023de558ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-100607", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwha6qoogj25", "content": "CVE-2026-100607 - flowise\nFlowise versions up to 3.1.4 identify users only by their email address and do not keep track of which single sign\u2011on service or password was used. Because of this, someone who\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#flowise #flowiseai #CVE #infosec", "creation_timestamp": "2026-09-26T21:30:07.680293Z"}]}