CVE-2026-0707

CVE-2026-0707 affects Keycloak’s Authorization header parser, which is overly permissive with the Bearer scheme. The vulnerability accepts non-standard separators (e.g., tabs) and tolerates case variations that deviate from RFC 6750, enabling potential authentication handling bypasses. Public sou...