Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/05/28 3:49 a.m.52 views

CVE-2026-9795 Keycloak: keycloak: privilege escalation via improper scope mapping enforcement

A flaw was found in Keycloak's Fine-Grained Admin Permissions FGAPv2 feature. An administrator with limited client management permissions can exploit this vulnerability to assign any realm role, including highly privileged roles, to a client's scope mapping. This bypasses intended security...

7.3CVSS0.00354EPSS
SaveExploits0References6
Rows per page
Query Builder