{"vulnerability": "cve-2026-9550", "sightings": [{"uuid": "1ea339e4-1ba7-4202-8e33-3bcee19c7b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95503", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mw3r5or5lw2r", "content": "CVE-2026-95503: a flaw in the Kerberos federation provider of Red Hat build of Keycloak lets an adjacent-network attacker spoof the KDC and bypass authentication when Kerberos password login is used without SPNEGO. No exploitation is confirmed.", "creation_timestamp": "2026-09-22T08:01:49.322905Z"}, {"uuid": "7935cbd9-440d-4c91-809a-0388a68609ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95508", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117347412947442338", "content": "CVE-2026-95508 libslirp heap overflow: guest-controlled DHCPv6/TFTP options can smash host memory, DoS and possible RCE. CVSS 7.4, unpatched. Check your MTU and update now. https://www.valtersit.com/cve/CVE-2026-95508/ #CVE #infosec #libslirp", "creation_timestamp": "2026-09-28T07:10:23.069517Z"}, {"uuid": "ce0b9a64-3127-4649-9ba3-41072bdb9b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95508", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwks6i5tvl2u", "content": "CVE-2026-95508 libslirp heap overflow: guest-controlled DHCPv6/TFTP options can smash host memory, DoS and possible RCE. CVSS 7.4, unpatched. Check your MTU and update now. https://www.valtersit.com/cve/CVE-2026-95508/ #CVE #infosec #libslirp", "creation_timestamp": "2026-09-28T07:30:05.806638Z"}, {"uuid": "94cd11c3-4501-4e44-8186-2d79761e8e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95503", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117371084690274358", "content": "CVE-2026-95503 Keycloak Kerberos auth bypass, CVSS 6.8. Unpatched. Same-network attacker can spoof the KDC and take over accounts. Isolate Kerberos or stop using password auth without SPNEGO. https://www.valtersit.com/cve/CVE-2026-95503/ #CVE #infosec #Keycloak", "creation_timestamp": "2026-10-02T11:30:24.061040Z"}]}