CVE-2026-95503 Keycloak-services: keycloak-services: potential kdc spoofing bypass when kerberos password authentication is enabled

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center KDC by requesting a server ticket. This...

CVE-2026-95503 Keycloak-services: keycloak-services: potential kdc spoofing bypass when kerberos password authentication is enabled

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center KDC by requesting a server ticket. This...

CVE-2026-95503

Keycloak's Kerberos federation provider contains a KDC spoofing bypass that occurs when Kerberos password authentication is enabled without SPNEGO. In this configuration, Keycloak fails to verify the identity of the Key Distribution Center (KDC) by requesting a server ticket, allowing an attacker...

CVE-2026-95503: Improper Verification of Cryptographic Signature

A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center KDC by requesting a server ticket. This...

PT-2026-96681

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Kerberos federation provider of Keycloak. When Kerberos password authentication is utilized without SPNEGO Simple Protocol for Negotiating Access to a Server, the system...