Linux Distros Unpatched Vulnerability : CVE-2026-14613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have...

Linux Distros Unpatched Vulnerability : CVE-2026-14614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions FGAP v2 is enabled. This issue allows a...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46455 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892117...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.18.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-46455 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17892117...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via KeycloakSecurityHelper.parseAndVerifyAccessToken in the camel-keycloak component. An attacker can authenticate with an expired or not-yet-valid access token by sending a signed token to code paths tha...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the KeycloakSecurityPolicy process. An attacker can gain unauthorized access to protected routes by supplying any non-null value in the Authorization: Bearer header, which is accepted without cryptographic...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-53913 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874454...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =4.18.1, =3.31.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-53913 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-17874454...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-53913 Source advisory: GHSA-QVC3-6Q9X-95PJ...

Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely 'Failing Open' vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess, which performs three checks ...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =4.18.1, =3.31.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-53913 Source advisory: OSV:GHSA-QVC3-6Q9X-95PJ...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.15.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.15.0, =4.18.1, =3.31.0, =3.29.0, =3.29.0, =4.15.0, =4.18.2 Source cves: CVE-2026-53913 Source advisory: GHSA-QVC3-6Q9X-95PJ...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-53913 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-53913 Source advisory: OSV:GHSA-QVC3-6Q9X-95PJ...

GHSA-QVC3-6Q9X-95PJ Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Function and Failing Open Vulnerabilities

Improper Authentication, Missing Authentication for Critical Function, Not Failing Securely 'Failing Open' vulnerability in Apache Camel Keycloak Component. The KeycloakSecurityPolicy of camel-keycloak guards a route by running KeycloakSecurityProcessor.beforeProcess, which performs three checks ...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46455 Source advisory: GHSA-MQWC-6QWC-V9GQ...

io.kaoto.forage:forage-security-keycloak (1.5.0), org.apache.camel.quarkus:camel-quarkus-integration-test-keycloak (>=3.35.0, <=3.36.0) +3 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.19.0, <=4.20.0)

org.apache.camel:camel-keycloak MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =4.19.0, =4.20.0 Source cves: CVE-2026-46455 Source advisory: OSV:GHSA-MQWC-6QWC-V9GQ...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.18.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-46455 Source advisory: GHSA-MQWC-6QWC-V9GQ...

io.kaoto.forage:forage-security-keycloak (1.3), org.apache.camel.karaf:camel-keycloak (>=4.18.1, <=4.18.2) +4 more potentially affected by CVE-2026-46455 via org.apache.camel:camel-keycloak (>=4.18.0, <=4.18.2)

org.apache.camel:camel-keycloak MAVEN version =4.18.0, =4.18.1, =3.32.0, =3.32.0, =3.32.0, =4.18.0, =4.18.2 Source cves: CVE-2026-46455 Source advisory: OSV:GHSA-MQWC-6QWC-V9GQ...

GHSA-MQWC-6QWC-V9GQ Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks... with only the subject-exists check and the realm-URL issuer check. Keycloak's...

Apache Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks... with only the subject-exists check and the realm-URL issuer check. Keycloak's...