CVE-2026-111882

phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor authentication through the Keycloak and Entra ID SSO callbacks. Attackers holding a valid or phished IdP identity linked ...

CVE-2026-111882

The phpMyFAQ application versions 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta are vulnerable to an authentication bypass (CWE-287). The root cause lies in the Keycloak and Entra ID SSO callbacks, which allow IdP-authenticated users to skip TOTP two-factor authentication . An attack...

Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting

Keycloak 10.0.0 to 18.0.0 contains a cross-site scripting vulnerability via the client-registrations endpoint. On a POST request, the application does not sanitize an unknown attribute name before including it in the error response with a 'Content-Type' of text/hml. Once reflected, the response i...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass

Keycloak versions prior to 26.7.2, 26.6.6, and 26.4.15 contain a flaw in the reset-credentials flow that allows an unauthenticated attacker to bypass email verification and take over any user account. Two bugs are chained: 1 the tryAnotherWay handler stores a generic "true" selector note not scop...

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

Keycloak - Open Redirect

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially...

KeyCloak - Information Exposure

A flaw was found in keycloak in versions prior to 13.0.0. The client registration endpoint allows fetching information about PUBLIC clients like client secret without authentication which could be an issue if the same PUBLIC client changed to CONFIDENTIAL later. The highest threat from this...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

Keycloak 26.7.3 Username Takeover

Keycloak versions through 26.7.3 contain an improper authentication flaw in the first-broker-login flow that allows a matching external-provider username to lock a legitimate user out of their account...

PT-2026-116469

phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred username or email. Attackers controlling a Keycloak identity with a colliding username or unverified email can log in through...

PT-2026-116454

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 3.2.0-alpha through 4.1.8 phpMyFAQ versions 4.2.0-alpha through 4.2.0-alpha Description An authentication bypass exists that allows users authenticated via an Identity Provider IdP to skip Time-based One-Time Password TOTP...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

CVE-2026-100353 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

CVE-2026-100354 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

CVE-2026-100352 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-dynamodb, crossplane-provider-aws-route53, crossplane-provider-aws-firehose, crossplane-provider-azure-authorization, gitness, crossplane-provider-azure-sql, crossplane-provider-keycloak, crossplane-provider-family-aws,...