CVE

Follow the thread. Read the stories.

2026

30 Sep 20267 min read

A Recycled File Descriptor: CVE-2026-103547 in OpenBSD's ldapd

OpenBSD · ldapd(8) · CVE-2026-103547 · CVSS 4.0 9.2 Critical CVE-2026-103547 is a bug with no memory corruption and no exotic side channel. It is two processes agreeing to identify a client by a number that the operating system is…

14 Sep 20265 min read

The Timestamp Keycloak Forgot to Check: CVE-2026-1190

Keycloak · SAML brokering · CVE-2026-1190 · CVSS 3.1 Low SAML has two places that tell you when an assertion stops being valid. Keycloak, acting as a SAML broker, checked one of them and quietly ignored the other. That is the whole bug.…

Security Bug Bounty Keycloak