https://vulnerability.circl.lu/sightings/feed 2026-06-25T15:25:51.988616+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6d645584-5d21-4a96-95ab-9718a06f0456/export 2026-06-25T15:25:52.009708+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6d645584-5d21-4a96-95ab-9718a06f0456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9802", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvjuuir7f2p", "content": "CVE-2026-9802 - Keycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart\nCVE ID : CVE-2026-9802\n \n Published : May 28, 2026, 6:16 a.m. | 15\u00a0minutes ago\n \n Description : A flaw was found in Keycloak. When revokeRefreshToken=true is enabl...", "creation_timestamp": "2026-05-28T07:48:53.808522Z"} 2026-05-28T07:48:53.808522+00:00 https://vulnerability.circl.lu/sighting/82adee5d-2c76-4680-a4b3-72daa8342e6f/export 2026-06-25T15:25:52.009612+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "82adee5d-2c76-4680-a4b3-72daa8342e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9802", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mp2spky47gg2", "content": "RT @kmkz_security@x.com\n#Keycloak pwnage, all public.\n1: CVE-2026-4282 forges admin tokens unauth\n2: view-clients leaks every client secret, all versions, open #49220 (PoC: tinyurl.com/kmkz2)\n3: restart revives rotated refresh tokens, CVE-2026-9802\n\nNot every vuln has a CVE [\u2026]", "creation_timestamp": "2026-06-24T21:00:42.512319Z"} 2026-06-24T21:00:42.512319+00:00 https://vulnerability.circl.lu/sighting/78793637-8339-4b36-afae-1f476357db12/export 2026-06-25T15:25:52.007343+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78793637-8339-4b36-afae-1f476357db12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9802", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mp2tgfjk4k2r", "content": "RT @kmkz_security@x.com \n#Keycloak pwnage, all public.\n1: CVE-2026-4282 forges admin tokens unauth\n2: view-clients leaks every client secret, all versions, open #49220 (PoC: tinyurl.com/kmkz2)\n3: restart revives rotated refresh tokens, CVE-2026-9802\n\nNot every vuln has a CVE\nx.com/i/status/206...", "creation_timestamp": "2026-06-24T21:13:26.470260Z"} 2026-06-24T21:13:26.470260+00:00