{"vulnerability": "cve-2026-107121", "sightings": [{"uuid": "7c1b7bf8-ea1e-4c21-b06e-c0828b36054a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-107121", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mxbizxz7742o", "content": "Keycloak, the open-source login server, has a flaw (CVE-2026-107121): a network attacker can downgrade its email to plaintext and read the password-reset messages and login it sends.\n\nNo patch yet. Switch its email to TLS on port 465.", "creation_timestamp": "2026-10-07T08:17:45.055769Z"}]}