UNKNOWN OSS-Security

CVE-2026-76186

CVE-2026-76186: Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity

Affected Products

CVE-2026-76186

References

https://www.openwall.com/lists/oss-security/2026/09/15/8

Published: 2026-09-15 · Source: OSS-Security · Feed updated: 2026-09-15

This unknown severity vulnerability was published on 2026-09-15 via OSS-Security. Affected: CVE-2026-76186.

vulnfeed aggregates 14340 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.