Directory Traversal

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Directory Traversal via the keystore parameter when creating a key provider component. An attacker can...

CVE-2026-54513 vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

CVE-2026-54514 vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

CVE-2026-54516 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

GHSA-RMJ7-2VXQ-3G9F vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

CVE-2026-54512 vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: apache-tika, opensearch-fips, zipkin, management-api-for-apache-cassandra-5.0, dependency-track-apiserver, conductor-fips, kafbat-ui-fips, jmeter, spark, confluent-kafka, hono, akhq, confluent-common-docker, request-9047-keycloak-fips, ruby3.4-jrjackson, seata,...

GHSA-RCQC-6CW3-H962 vulnerabilities

Vulnerabilities for packages: kafbat-ui, apache-tika, jenkins-plugin-manager, infinispan, opensearch-fips, elasticsearch, nextflow, cassandra, apache-nifi, ruby4.0-jrjackson, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, dependency-track-apiserver,...

PT-2026-52592

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A JWT algorithm confusion flaw exists in the JWT Authorization Grant flow. An attacker possessing valid client credentials can bypass signature verification by forging an assertion. This...

PT-2026-52510

Name of the Vulnerable Software and Affected Versions Keycloak Policy Enforcer affected versions not specified Description An issue exists that allows authenticated users to bypass authorization policies, including role, scope, and User-Managed Access UMA permission checks. An attacker can gain...

CVE-2026-11800: Improper Verification of Cryptographic Signature

A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthorized access tokens. This enables the attacker to...

CVE-2026-9086: Improper Neutralization of Input During Web Page Generation

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, could bypass client Uniform Resource Identifier URI validation. This is achieved by registering a malicious client with a...

CVE-2026-9800: Comparison Using Wrong Factors

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

PT-2026-52505

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A realm administrator with the manage-realm role can probe arbitrary filesystem paths by submitting an arbitrary path as a keystore parameter during the creation of a key provider component...

PT-2026-52508

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the client registration service allows a remote attacker with a previously issued Registration Access Token RAT to re-enable a client that was explicitly disabled by an...