org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.1.0-beta.3, <=1.1.3.final), org.keycloak:keycloak-account-freemarker (1.3.1.final) +9 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.3.1.final)

org.keycloak:keycloak-services MAVEN version 1.3.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.1.0-beta.3, =1.1.3.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +21 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (12.0.0)

org.keycloak:keycloak-services MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.keycloak:keycloak-account-freemarker (1.0-final) +4 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.0-final)

org.keycloak:keycloak-services MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...

Keycloak Services has Improper Validation of Consistency within Input

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers URIs, a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2), org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2) +6 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (3.3.0.cr2)

org.keycloak:keycloak-services MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.cr2 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.10), com.github.vzakharchenko:cisco-radius-plugin (1.3.10) +22 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (15.0.0)

org.keycloak:keycloak-services MAVEN version 15.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.10 -...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150521), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150521) +1 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.0-beta-1-20150521)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150521 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150521 -...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=4.0.3-25.0, <=4.0.5-25.0) +23 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (25.0.6)

org.keycloak:keycloak-services MAVEN version 25.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - ch.iterial.keycloak.plugins:keycloak-directus-plugin =0.1.0, =4.0.3-25.0, =4.0.3-25.0, =4.0.5-25.0...

com.charlyghislain.keycloak:keycloak-importexport (19.0.0), com.github.vzakharchenko:chillispot-radius-plugin (>=1.4.7, <=1.4.8) +32 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (19.0.1)

org.keycloak:keycloak-services MAVEN version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 19.0.0 -...

org.keycloak:keycloak-authz-policy-drools (7.0.1), org.keycloak:keycloak-dependencies-server-all (7.0.1) +6 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (7.0.1)

org.keycloak:keycloak-services MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 7.0.1 - org.keycloak:keycloak-dependencies-server-all 7.0...

org.keycloak:keycloak-authz-policy-drools (2.0.0.final), org.keycloak:keycloak-dependencies-server-all (2.0.0.final) +3 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (2.0.0.final)

org.keycloak:keycloak-services MAVEN version 2.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.0.0.final -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.beta2), org.keycloak:keycloak-account-freemarker (1.0-beta-4) +3 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.0-beta-4)

org.keycloak:keycloak-services MAVEN version 1.0-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.beta2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=2.5.3-23.0, <=2.5.5-23.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.3-23.0, <=2.5.5-23.0) +24 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (23.0.7)

org.keycloak:keycloak-services MAVEN version 23.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =2.5.3-23.0, =2.5.3-23.0, =0.58, =0.66 -...

org.keycloak:keycloak-authz-policy-drools (3.3.0.final), org.keycloak:keycloak-dependencies-server-all (3.3.0.final) +6 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (3.3.0.final)

org.keycloak:keycloak-services MAVEN version 3.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.final -...

org.keycloak:keycloak-account-freemarker (1.1.0.beta2), org.keycloak:keycloak-dependencies-server-min (1.1.0.beta2) +1 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.1.0.beta2)

org.keycloak:keycloak-services MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.1.0.beta2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.keycloak:keycloak-account-freemarker (1.0-rc-1) +4 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.0-rc-1)

org.keycloak:keycloak-services MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

org.keycloak:keycloak-dependencies-server-all (1.9.5.final), org.keycloak:keycloak-dependencies-server-min (1.9.5.final) +2 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (1.9.5.final)

org.keycloak:keycloak-services MAVEN version 1.9.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.5.final -...

com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +15 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (8.0.1)

org.keycloak:keycloak-services MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =2.0.4, =2.0.4, =2.0.5 -...

org.keycloak:keycloak-authz-policy-drools (3.4.1.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1) +6 more potentially affected by CVE-2026-9689 via org.keycloak:keycloak-services (3.4.1.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.cr1 -...