{"vulnerability": "cve-2026-19117", "sightings": [{"uuid": "525cd9e3-3486-4f57-87da-1ba6867a6458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukqgaf7rc2o", "content": "\ud83d\udea8 CVE-2026-19117 \u2014 CVSS 9.8 CRITICAL\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a targe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-19117\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T20:08:15.531927Z"}, {"uuid": "83b7abb7-76d2-4ce2-8069-788b9b49d349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mukturcdkj2w", "content": "CVE-2026-19117 - secret server (on-prem)\nIf you run the software on your own servers, a flaw can let a malicious person create a fake security key for a user\u2019s account and then sign in as that user.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#secretserver #delinea #CVE #infosec", "creation_timestamp": "2026-09-02T21:10:04.935819Z"}, {"uuid": "b36cf8e2-653f-4a30-909d-72000fbbf98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19117", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117203638460137783", "content": "Credential managers are so hot right now. Here's Delinea's on-prem offering.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-19117\nsev:CRIT 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only.", "creation_timestamp": "2026-09-02T21:46:37.436118Z"}, {"uuid": "b58cadb7-f201-4c38-b90d-35f4d39bc96e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19117", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mul26laor523", "content": "\ud83d\udd34 CVE-2026-19117 - Critical (9.8)\n\nUnder specific conditions, an attacker can register an attacker-controlled FIDO2 credential again...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-19117/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-02T23:02:55.770110Z"}]}