5704 matches found
CVE-2026-103884
A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...
EUVD-2026-90972
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-1529
CVE-2026-1529 Keycloak Exploit Tool CVE-2026-1529 : Keycloak — Несанкционированная регистрация организации через некорректную проверку пригласительного токена ⚠️ ПРЕДУПРЕЖДЕНИЕ : Этот инструмент предназначен только для образовательных целей и авторизованного тестирования безопасности...
CVE-2026-23552
CVE-2026-23552 - Принятие токенов между realm в camel-keycloak Обзор KeycloakSecurityPolicy в Apache Camel не проверяет утверждение iss эмитент JWT-токенов на соответствие настроенному realm. Это означает, что токен, выданный одним realm Keycloak, молча принимается политикой, настроенной для...
CVE-2026-53913
CVE-2026-53913 — обход аутентификации Fail-Open в camel-keycloak Рабочие proof-of-concept репроducers для одной и той же уязвимости Apache Camel, по одному на каждый рантайм: Рантайм| Каталог| Стек ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Cam...
keycloak__keycloak_CVE-2022-4361_21-1-1
Keycloak Keycloak — это решение с открытым исходным кодом для управления идентификацией и доступом IAM для современных приложений и сервисов. Этот репозиторий содержит исходный код сервера Keycloak, адаптеров Java и адаптера JavaScript. Помощь и документация Документация Список рассылки...
CVE-2026-82806
Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported authz-keycloak configuration, a request's authorization scope could persist into later requests on the same route, leading to unintended...
CVE-2026-82806
Apache APISIX versions 2.3.0 through 3.6.x are vulnerable to a cross-request permission pollution issue when using a supported authz-keycloak configuration. The root cause involves a static permission list mutation where an authorization scope from one request persists into subsequent requests on...
EUVD-2026-90764
Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported authz-keycloak configuration, a request's authorization scope could persist into later requests on the same route, leading to unintended...
CVE-2026-82806 Apache APISIX: cross-request permission pollution via static permission list mutation
Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported authz-keycloak configuration, a request's authorization scope could persist into later requests on the same route, leading to unintended...
CVE-2022-4361
CVE-2022-4361 Description Ce dépôt contient une POC pour CVE-2022-4361. Tout le crédit revient à l'auteur original de la découverte, mulliken; IMPORTANT : cette POC n'est pas complète car elle ne couvre pas le cas de la valeur AssertionConsumerServiceURL dans le protocole d'authentification SAML...
CVE-2026-103884: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
keycloak v26.7.5
Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...
CVE-2026-59296 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
GHSA-V7HR-HGG3-VV6Q vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2026-59295 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
GHSA-8JCV-3C3X-VWG4 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
GHSA-77QF-R755-9GCW vulnerabilities
Vulnerabilities for packages: keycloak-fips...