2026-10-11 17:09 UTC

vulnerability-response

band: coolmomentum: stable score: 0.004
temperature history

Episodes (2)

Maintainer triage and independent reproduction will determine whether Keycloak’s reset-credentials flow permits unauthenticated account takeover in supported configurations and requires a security patch.
resolvedknownscott: low
The mikrotrick-poc release is reported to demonstrate an actively exploited unauthenticated SSH takeover of MikroTik devices, potentially making exposed network equipment an immediate compromise path requiring containment.
expirednovelscott: low

Trajectory notes