keycloak-core: keycloak-core: SAML adapter does not bind signed assertions to the configured identity provider issuer

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

keycloak-core: keycloak-core: SAML adapter does not bind signed assertions to the configured identity provider issuer

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

CVE-2026-93998

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

CVE-2026-93998

A vulnerability exists in the SAML adapter component of Keycloak-core . The flaw stems from a failure to verify that the issuer of a signed SAML assertion matches the configured identity provider. If multiple identity providers share the same trusted signing key, an attacker controlling one provi...

EUVD-2026-117608

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

CVE-2026-93998 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

CVE-2026-93998

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

PT-2026-137580

A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication. The adapter fails to verify that the issuer of a signed SAML assertion matches the expected identity provider configured for the application. If multiple identity...

org.keycloak:keycloak-dependencies-server-all (6.0.1), org.keycloak:keycloak-saml-adapter-api-public (6.0.1) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (6.0.1)

org.keycloak:keycloak-saml-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-saml-adapter-api-public (3.4.2.final), org.keycloak:keycloak-saml-adapter-core (3.4.2.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (3.4.2.final)

org.keycloak:keycloak-saml-core MAVEN version 3.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 3.4.2.final -...

org.keycloak:keycloak-broker-saml (1.6.1.final), org.keycloak:keycloak-dependencies-server-all (1.6.1.final) +19 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (1.6.1.final)

org.keycloak:keycloak-saml-core MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.6.1.final - org.keycloak:keycloak-dependencies-server-a...

org.keycloak:keycloak-saml-adapter-api-public (4.8.3.final), org.keycloak:keycloak-saml-adapter-core (4.8.3.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.8.3.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.3.final -...

org.keycloak:keycloak-dependencies-server-all (5.0.0), org.keycloak:keycloak-saml-adapter-api-public (5.0.0) +28 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (5.0.0)

org.keycloak:keycloak-saml-core MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 5.0.0 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-saml-adapter-api-public (4.5.0.final), org.keycloak:keycloak-saml-adapter-core (4.5.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.5.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.5.0.final -...

org.keycloak:keycloak-dependencies-server-all (2.5.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.5.0.cr1) +21 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (2.5.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.5.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.5.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (24.0.0), org.keycloak:keycloak-guides (24.0.0) +24 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (24.0.0)

org.keycloak:keycloak-saml-core MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 24.0.0 - org.keycloak:keycloak-guides 24.0.0 -...

org.keycloak:keycloak-dependencies-server-all (8.0.1), org.keycloak:keycloak-saml-adapter-api-public (8.0.1) +23 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (8.0.1)

org.keycloak:keycloak-saml-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 8.0.1 - org.keycloak:keycloak-saml-adapter-api-publ...

org.keycloak:keycloak-saml-adapter-api-public (4.8.2.final), org.keycloak:keycloak-saml-adapter-core (4.8.2.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.8.2.final)

org.keycloak:keycloak-saml-core MAVEN version 4.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.8.2.final -...

org.keycloak:keycloak-saml-adapter-api-public (4.0.0.final), org.keycloak:keycloak-saml-adapter-core (4.0.0.final) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (4.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.0.0.final -...

org.keycloak:keycloak-dependencies-server-all (23.0.0), org.keycloak:keycloak-guides (23.0.0) +25 more potentially affected by CVE-2026-7307 via org.keycloak:keycloak-saml-core (23.0.0)

org.keycloak:keycloak-saml-core MAVEN version 23.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 23.0.0 - org.keycloak:keycloak-guides 23.0.0 -...