16621 matches found
CVE-2026-24830
creationtimestamp| type| source ---|---|--- 2026-01-27 10:05:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115966496664593357 2026-01-27 10:27:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdfkcuouhg2m 2026-01-27 12:25:53+00:00| seen|...
openSUSE 16 Security Update : rabbitmq-server (openSUSE-SU-2026:20082-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20082-1 advisory. Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now...
CVE-2026-1406
creationtimestamp| type| source ---|---|--- 2026-01-25 15:58:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956561628060539...
CVE-2026-23012
creationtimestamp| type| source ---|---|--- 2026-01-25 15:10:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaz7qfiv62i 2026-01-25 15:34:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956467313120586...
CVE-2025-71162
creationtimestamp| type| source ---|---|--- 2026-01-25 15:07:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115956361180683451 2026-01-25 15:43:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdb32r34af2c 2026-03-19 00:00:00+00:00| seen|...
CVE-2025-71160
creationtimestamp| type| source ---|---|--- 2026-01-23 16:33:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115945372665574698 2026-01-23 17:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md4at3vuon2i 2026-03-19 00:00:00+00:00| seen|...
SUSE-SU-2026:20126-1 Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported it previously was an experimental feature - AMQP 1.0 is now a core...
OPENSUSE-SU-2026:20082-1 Security update for rabbitmq-server
This update for rabbitmq-server fixes the following issues: Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now fully supported it previously was an experimental feature - AMQP 1.0 is now a core...
CVE-2026-1329
creationtimestamp| type| source ---|---|--- 2026-01-22 11:37:14+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115938546913707956 2026-01-22 15:27:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcziqdessu2c...
GHSA-232V-J27C-5PP6
creationtimestamp| type| source ---|---|--- 2026-01-22 00:48:52+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115935997438542873 2026-01-22 00:51:09+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115936006347966952 2026-01-24 21:24:05+00:00| seen|...
Keycloak services allows the issuance of access and refresh tokens for disabled users
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
GHSA-WV3H-X6C4-R867 Keycloak services allows the issuance of access and refresh tokens for disabled users
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
UBUNTU-CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
Improper Enforcement of Behavioral Workflow
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Enforcement of Behavioral Workflow via the Token Exchange implementation. An attacker can obtain...
CVE-2025-14559 Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
CVE-2025-14559
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...
CVE-2025-14559
CVE-2025-14559 affects Keycloak’s keycloak-services component. A business-logic flaw in the Token Exchange flow allows a privileged client to issue access/refresh tokens for disabled users, potentially bypassing revoked privileges. Affected products/versions are echoed in connected Nessus entries...
CVE-2025-14559 Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users
A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a...