CLEANSTART-2026-LC38113 Security fixes in keycloak 26.4.7-r5

Package keycloak version 26.4.7-r5 fixes 5 vulnerabilities: CVE-2026-57914, CVE-2026-9563, CVE-2025-11965, CVE-2025-11966, CVE-2026-45536...

CVE-2026-11965

creationtimestamp| type| source ---|---|--- 2026-07-02 08:15:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpnlp5dwuo2m 2026-07-02 20:05:48+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoternhxa2r...

CVE-2026-11965

The User Registration & Membership WordPress plugin before 5.2.0 does not enforce payment completion before activating a paid membership subscription, allowing unauthenticated users after self-registering an account through the open registration flow to obtain an active subscription on any paid...

Security Bulletin: IBM Event Endpoint Management is vulnerable to unauthorized access

Summary IBM Event Endpoint Management is vulnerable to unauthorized access due to improper restriction of hidden directories CVE-2025-11965 Vulnerability Details CVEID:CVE-2025-11965 DESCRIPTION: In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for...

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.3.1 Vulnerability Details CVEID:CVE-2025-11965 DESCRIPTION: In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidd...

CVE-2025-11965

creationtimestamp| type| source ---|---|--- 2026-01-16 21:11:12+00:00| seen| Telegram/v0bFlPUxaA4daJAECyFAZPTM5zTRL708CBV4pLvIHYbHtU...

CVE-2019-11965

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2025-11965 vulnerabilities

Vulnerabilities for packages: keycloak, strimzi-kafka-operator...

CVE-2025-11965 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, keycloak, keycloak-fips...

CVE-2025-11965

In Eclipse Vert.x versions 4.0.0, 4.5.21 and 5.0.0, 5.0.4, a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories, allowing unauthorized users to retrieve files within them e.g. '.git/config'. Mitigation Mitigation for this issue is...

com.github.advantageous:qbit-admin (>=0.9.1-rc11, <=0.9.2-rc14), com.github.advantageous:qbit-consul-client (>=0.9.1-rc11, <=0.9.2-rc14) +42 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.1.0)

io.vertx:vertx-web MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - com.github.advantageous:qbit-admin =0.9.1-rc11, =0.9.1-rc11, =0.9.1-rc11, =0.9.1-rc11, =0.9.1-rc11, =0.9.1-rc11, =0.9.1-rc1...

cc.vileda.kalfor:kalfor-combine-handler (1.2.1), cc.vileda.kalfor:kalfor-handler (2.0.0) +16 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.3.0)

io.vertx:vertx-web MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - cc.vileda.kalfor:kalfor-combine-handler 1.2.1 - cc.vileda.kalfor:kalfor-handler 2.0.0 - cc.vileda.kalfor:kalfor-library 1.2...

co.easimart:vertx-util (>=1.0.0, <=1.0.1), com.github.phiz71:vertx-swagger-router (1.5.0) +99 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.4.2)

io.vertx:vertx-web MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - co.easimart:vertx-util =1.0.0, =0.0.3, =0.0.28, =0.14.0, =0.12.0, =0.13.0 and more Source cves: CVE-2025-11965 Source...

com.github.fmcejudo:quarkus-eureka (0.0.5), com.github.fmcejudo:quarkus-eureka-deployment (0.0.5) +125 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.8.3-01)

io.vertx:vertx-web MAVEN version 3.8.3-01 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - com.github.fmcejudo:quarkus-eureka 0.0.5 - com.github.fmcejudo:quarkus-eureka-deployment 0.0.5 -...

ai.tock:bot-test (20.3.4), ai.tock:bot-test-base (20.3.4) +551 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.9.2)

io.vertx:vertx-web MAVEN version 3.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - ai.tock:bot-test 20.3.4 - ai.tock:bot-test-base 20.3.4 - ai.tock:bot-toolkit 20.3.4 - ai.tock:bot-toolkit-base 20.3.4 -...

ai.tock:bot-test (>=25.9.0, <=25.10.6), ai.tock:bot-test-base (>=25.9.0, <=25.10.6) +95 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (>=5.0.0, <=5.0.4)

io.vertx:vertx-web MAVEN version =5.0.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-11965 Source advisory: GHSA-H5FG-JPGR-RV9C...

cn.vertxup:vertx-co (>=0.4.6, <=0.4.7.1), cn.vertxup:vertx-import (>=0.4.6, <=0.4.7.1) +158 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.5.1)

io.vertx:vertx-web MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - cn.vertxup:vertx-co =0.4.6, =0.4.6, =0.4.6, =0.4.6, =0.4.6, =0.3.0, =1.0.1, =1.0.1, =1.0.1, =1.0.3, =1.0.1, =1.0.1, =1.0.3,...

io.vertx:vertx-circuit-breaker-scala_2.12 (3.5.2.cr1), io.vertx:vertx-dropwizard-metrics-scala_2.12 (3.5.2.cr1) +24 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.5.2.cr1)

io.vertx:vertx-web MAVEN version 3.5.2.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - io.vertx:vertx-circuit-breaker-scala2.12 3.5.2.cr1 - io.vertx:vertx-dropwizard-metrics-scala2.12 3.5.2.cr1 -...

io.vertx:vertx-circuit-breaker-scala_2.12 (3.6.0.cr2), io.vertx:vertx-dropwizard-metrics-scala_2.12 (3.6.0.cr2) +17 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.6.0.cr2)

io.vertx:vertx-web MAVEN version 3.6.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - io.vertx:vertx-circuit-breaker-scala2.12 3.6.0.cr2 - io.vertx:vertx-dropwizard-metrics-scala2.12 3.6.0.cr2 -...

com.github.raghav-chandra:tools-mbq (>=0.0.1, <=0.5.0), com.github.timofeevda.jstressy:jstressy-api (>=1.0.15, <=1.0.16) +41 more potentially affected by CVE-2025-11965 via io.vertx:vertx-web (3.8.0)

io.vertx:vertx-web MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.vertx:vertx-web and may be impacted: - com.github.raghav-chandra:tools-mbq =0.0.1, =1.0.15, =1.0.15, =1.0.15, =1.0.15, =1.0.15, =1.0.15, =1.0.15, =1.0.15, =1.0.15...