keycloak-admin-ui: keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

Insertion of Sensitive Information Into Sent Data

Overview @keycloak/keycloak-admin-ui is a This project is the next generation of the Keycloak Admin UI. It is written with React and PatternFly 4 and uses Vite. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data through...

CVE-2026-14209 Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

CVE-2026-14209

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

EUVD-2026-40299

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions FGAPv2 are enabled, an administrator who should only be able to search for users but not view their full details can use a...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2026-7507 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2026-37980 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2026-3911 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2026-2733 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.10), com.github.vzakharchenko:cisco-radius-plugin (1.4.10) +25 more potentially affected by CVE-2025-14083 via org.keycloak:keycloak-services (20.0.3)

org.keycloak:keycloak-services MAVEN version 20.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.10 -...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.1, <=8.9), org.keycloak.testframework:keycloak-test-framework-clustering (>=26.3.0, <=26.3.3) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (>=26.3.0, <=26.3.3)

org.keycloak:keycloak-admin-ui MAVEN version =26.3.0, =8.1, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.3 and more Source cves: CVE-2025-10044https://vulners.com/c...

org.keycloak:keycloak-guides (22.0.3), org.keycloak:keycloak-guides-maven-plugin (22.0.3) +4 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (22.0.3)

org.keycloak:keycloak-admin-ui MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-guides 22.0.3 - org.keycloak:keycloak-guides-maven-plugin 22.0.3 -...

org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (1.0-alpha-1-12062013)

org.keycloak:keycloak-admin-ui MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-server 1.0-alpha-1-12062013 Source cves: CVE-2025-10044 Source...

org.keycloak:keycloak-dependencies-server-all (23.0.4), org.keycloak:keycloak-dependencies-server-min (23.0.4) +7 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (23.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 23.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.4 - org.keycloak:keycloak-dependencies-server-m...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (4.0.2-25.0), org.keycloak:keycloak-dependencies-server-all (25.0.4) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (25.0.4)

org.keycloak:keycloak-admin-ui MAVEN version 25.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 4.0.2-25.0 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=4.1.0-26.0, <=5.4.3-26.2), org.keycloak.testframework:keycloak-test-framework-core (>=26.1.0, <=26.2.5) +23 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (>=26.0.0, <=26.2.5)

org.keycloak:keycloak-admin-ui MAVEN version =26.0.0, =4.1.0-26.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.2.0, =26.2.0, =26.1.0, =26.1.0, =26.1.0, =26.1.0, =26.0.0, =26.2.5 and more Source cves: CVE-2025-1004...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=2.5.6-24.0, <=2.7.4-24.0), org.keycloak:keycloak-dependencies-server-all (24.0.2) +8 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (24.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 24.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests =2.5.6-24.0, =2.7.4-24.0 -...

org.keycloak:keycloak-dependencies-admin-ui-wrapper (20.0.2), org.keycloak:keycloak-quarkus-integration-tests (20.0.2) +3 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (20.0.2)

org.keycloak:keycloak-admin-ui MAVEN version 20.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 20.0.2 -...