CVE-2026-3872

CVE-2026-3872 involves Keycloak and describes a flaw where an attacker controlling another path on the same web server can bypass the allowed path in redirect URIs that use a wildcard. This bypass can lead to information disclosure by theft of an access token. The connected documents confirm the ...

CVE-2026-4282

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens,...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak itself. Keycloak has a security vulnerability that stems from sending a specially crafted POST request with an excessively long scope parameter to the OIDC token endpoint. This can lead to excessive resource...

PT-2026-29731

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect OIDC token endpoint. This leads to high resource consumption and prolonged processing times, ultimate...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability that stems from the lack of proper type and namespace isolation in SingleUseObjectProvider. This vulnerability could allow attackers to delete single-use entries, thereb...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. There is a security vulnerability in Keycloak. This vulnerability arises from verified users with the UMA protection role being able to bypass UMA policy verification. This could allow attackers to include...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability that stems from the use of wildcarded redirect URI paths, which may allow attackers to steal access tokens, leading to information leaks...

PT-2026-29728

A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers URIs that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information...

Keycloak 安全漏洞

Keycloak is an open-source identity and access management solution developed by Keycloak. Keycloak has a security vulnerability, which stems from the lack of proper type and namespace isolation in SingleUseObjectProvider. This vulnerability could allow unverified attackers to forge authorization...

PT-2026-29730

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbitrary single-use entries, which can enable the replay of consumed action tokens, such as password reset links. This...

PT-2026-29729

Name of the Vulnerable Software and Affected Versions Red Hat build of Keycloak version 26.2 Description A flaw exists in the SingleUseObjectProvider, which serves as a global key-value store, due to a lack of proper type and namespace isolation. This allows an unauthenticated attacker to forge...

CLEANSTART-2026-TA42758 Security fixes for ghsa-3p8m-j85q-pgmj, ghsa-45p5-v273-3qqr, ghsa-4cx2-fc23-5wg6, ghsa-9342-92gg-6v29, ghsa-fghv-69vj-qj49, ghsa-h5fg-jpgr-rv9c, ghsa-hq9p-pm7w-8p54, ghsa-j288-q9x7-2f5v applied in versions: 26.1.4-r1

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-iam, grafana-alloy, aws-otel-collector, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-sns, crossplane-provider-aws-iam, grafana-alloy, aws-otel-collector, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudformation, crossplane-provider-aws-memorydb, crossplane-provider-aws-cloudwatchlogs,...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: thingsboard, flyway, infinispan, akhq, apicurio-registry, druid, management-api-for-apache-cassandra-5.0, wildfly, kserve-modelmesh, opensearch, keycloak, spark, wavefront-proxy, sonarqube, trino, zipkin, neo4j, apache-pulsar, strimzi-kafka-operator...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: thingsboard, flyway, infinispan, akhq, apicurio-registry, druid, management-api-for-apache-cassandra-5.0, wildfly, kserve-modelmesh, opensearch, keycloak, spark, wavefront-proxy, sonarqube, trino, zipkin, neo4j, apache-pulsar, strimzi-kafka-operator...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: apache-hop, apache-hop-fips, opensearch, kafbat-ui-fips, commercial-elasticsearch, trino, hono, management-api-for-apache-cassandra-4.1, wazuh-indexer, wildfly, reposilite, elasticsearch-fips, flyway-fips, akhq, kafka-bridge, druid, kafbat-ui,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: apache-hop, apache-hop-fips, opensearch, kafbat-ui-fips, commercial-elasticsearch, trino, hono, management-api-for-apache-cassandra-4.1, wazuh-indexer, wildfly, reposilite, elasticsearch-fips, flyway-fips, akhq, kafka-bridge, druid, kafbat-ui,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: thingsboard, flyway, infinispan, akhq, apicurio-registry, druid, management-api-for-apache-cassandra-5.0, wildfly, kserve-modelmesh, opensearch, keycloak, spark, wavefront-proxy, tez, apache-activemq-artemis, sonarqube, trino, logstash, zipkin, apache-pulsar,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: thingsboard, flyway, infinispan, akhq, apicurio-registry, druid, management-api-for-apache-cassandra-5.0, wildfly, kserve-modelmesh, opensearch, keycloak, spark, wavefront-proxy, tez, apache-activemq-artemis, sonarqube, trino, logstash, zipkin, apache-pulsar,...