6022 matches found
Security Restriction Bypass
org.keycloak, keycloak-services is vulnerable to a security restriction bypass. The vulnerability is due to insufficient host validation that checks only the beginning of a web address, which allows an attacker to bypass secure-client-uris policy restrictions using a specially crafted domain and...
CVE-2026-77995: Authorization Bypass Through User-Controlled Key
Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client 3.2.0, OAuth Single Sign-On – OIDC SSO 1.2.2, Login with Keycloak OAuth Single Sign-On SSO 1.2.2, Single Sign-On for Educational Institutes 1.2.2 - The manipulation of a cookie value allows actors to login a...
PT-2026-80875
Name of the Vulnerable Software and Affected Versions HCL Hive Keycloak IAM Instance affected versions not specified Description Insufficient granularity of access control may allow an attacker to gain unauthorized access to resources. Recommendations At the moment, there is no information about ...
CVE-2025-68833: Use of a Cryptographic Primitive with a Risky Implementation
HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access to resources...
GHSA-GGG2-9786-HWC8 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, apache-nifi-registry...
CVE-2026-41001 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
GHSA-GGG2-9786-HWC8 vulnerabilities
Vulnerabilities for packages: keycloak-config-cli...
CVE-2026-9689 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
CVE-2026-9793 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
GHSA-P3V8-FM5P-V84H vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
CVE-2026-9798 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
GHSA-Q6H7-XXP7-7429 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
GHSA-WCVJ-VPVW-9RR5 vulnerabilities
Vulnerabilities for packages: keycloak, keycloak-fips, request-9047-keycloak-fips...
GHSA-Q6H7-XXP7-7429 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-P3V8-FM5P-V84H vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2026-9689 vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2026-9798 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-WCVJ-VPVW-9RR5 vulnerabilities
Vulnerabilities for packages: keycloak...
