2 matches found
CVE-2026-2733
A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...
5.1CVSS5.7AI score0.00371EPSS
SaveExploits0References8
CVE-2026-2733: Improper Authorization
A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even after a Docker registry client has been administratively disabled. This means that turning the client “Enabled” setting to OFF does not fully prevent access. As a result, previously...
3.8CVSS5.8AI score0.00371EPSS
SaveExploits0References1
20