CVE-2026-9704

creationtimestamp| type| source ---|---|--- 2026-05-27 16:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtw673e7s2i 2026-05-28 07:46:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116651091197554066...

org.keycloak:keycloak-authz-policy-common (4.0.0.final), org.keycloak:keycloak-dependencies-server-min (4.0.0.final) +9 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (4.0.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.0.0.final -...

com.github.vzakharchenko:keycloak-plugins (1.2.4), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.4) +19 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (10.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +30 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (12.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +31 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (12.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +31 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (15.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +32 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (17.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

city.smartb.i2:keycloak-plugin-client (>=0.11.0, <=0.13.0), city.smartb.i2:keycloak-plugin-domain (>=0.11.0, <=0.13.0) +41 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (18.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 18.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - city.smartb.i2:keycloak-plugin-client =0.11.0, =0.11.0, =0.0.1, =0.3.0 -...

org.eclipse.dirigible:dirigible-server-spring (7.1.5), org.eclipse.dirigible:dirigible-spring-services (7.1.5) +44 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (20.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 20.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.eclipse.dirigible:dirigible-server-spring 7.1.5 -...

com.abavilla:fpi-bot-api (>=1.6.0, <=1.8.0), com.abavilla:fpi-bot-api-parent (>=1.6.0, <=1.8.0) +88 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (21.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.6.0, =1.6.0, =1.8.0, =1.8.0, =1.6.0, =1.6.0, =1.8....

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.eclipse.dirigible:dirigible-application (8.18.9) +47 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (23.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

com.kleegroup.accelerator:accelerator-message-keycloakbrevo (>=1.0.1, <=1.0.2), com.kleegroup.accelerator:accelerator-security-keycloakmfa (1.0.1) +53 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.3)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.kleegroup.accelerator:accelerator-message-keycloakbrevo =1.0.1,...

de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak (2.3.2), de.fraunhofer.iosb.ilt.frost-server:frost-server.http (2.3.2) +68 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.4)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.fraunhofer.iosb.ilt.frost-server:frost-server.auth.keycloak 2.3.2 -...

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +64 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (24.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 ...

de.arbeitsagentur.opdt:keycloak-extension-filestore (>=1.0.2-25.0, <=1.0.4-25.0), org.keycloak:keycloak-authz-policy-common (25.0.5) +23 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-server-spi-private (25.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 25.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.arbeitsagentur.opdt:keycloak-extension-filestore =1.0.2-25.0, =1.0.4-25.0 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0.1.final), org.keycloak:keycloak-dependencies-server-all (1.0.1.final) +3 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.0.1.final)

org.keycloak:keycloak-services MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0.1.final -...

org.keycloak:keycloak-account-freemarker (1.1.0.beta2), org.keycloak:keycloak-dependencies-server-min (1.1.0.beta2) +1 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.1.0.beta2)

org.keycloak:keycloak-services MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.1.0.beta2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.1.0-alpha.2, <=1.1.0-beta.1), org.keycloak:keycloak-account-freemarker (1.1.0.final) +2 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.1.0.final)

org.keycloak:keycloak-services MAVEN version 1.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.1.0-alpha.2, =1.1.0-beta.1 -...

org.keycloak:keycloak-account-freemarker (1.2.0.beta1), org.keycloak:keycloak-broker-oidc (1.2.0.beta1) +4 more potentially affected by CVE-2026-9704 via org.keycloak:keycloak-services (1.2.0.beta1)

org.keycloak:keycloak-services MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 - org.keycloak:keycloak-broker-oidc...