CVE-2026-18217

The CVE describes a flaw in Keycloak’s SAML protocol handling with HTTP-Redirect binding. If a client uses a wildcard redirect URL, an attacker can craft a request with malicious parameters, and during user authentication Keycloak may append its legitimate response to the attacker’s parameters. T...