org.keycloak:keycloak-authz-policy-common (3.0.0.cr1), org.keycloak:keycloak-authz-policy-drools (3.0.0.cr1) +11 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (3.0.0.cr1)

org.keycloak:keycloak-server-spi-private MAVEN version 3.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 3.0.0.cr1 -...

de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +17 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (6.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.6,...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), ch.nerdin.keycloak.extensions:avatar-extension (0.0.1) +387 more potentially affected by CVE-2026-3190 via org.keycloak:keycloak-server-spi-private (>=2.4.0.cr1, <=26.5.5)

org.keycloak:keycloak-server-spi-private MAVEN version =2.4.0.cr1, =0.1.0, =0.11.0, =0.10.4, =0.0.1, =1.5.1, =1.5.1, =1.6.2, =1.6.2, =1.5.2, =1.5.2, =1.7.2, =1.7.2, =1.0.22, =1.0.22, =1.0.28 and more Source cves: CVE-2026-3190 Source advisory: MEND:CVE-2026-3190...

Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50160)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50160 advisory. - mm/hugetlb: fix hugetlbpmdshared David Hildenbrand Orabug: 38931087 CVE-2026-23100 - platform/x86: classmate-laptop: Add missing NULL pointer...

USN-8116-1: Linux kernel (Intel IoTG Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +23 more potentially affected by CVE-2026-4628 via org.keycloak:keycloak-services (12.0.3)

org.keycloak:keycloak-services MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

PT-2026-36418

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The aml sfc probe function registers the on-host NAND ECC engine, but it lacks the necessary teardown process during probe unwind and remove-time cleanup. This results in the ECC engine...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +30 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (12.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9,...

org.keycloak:keycloak-authz-policy-common (10.0.0), org.keycloak:keycloak-dependencies-server-all (10.0.0) +12 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (10.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 10.0.0 -...

com.abavilla:fpi-bot-api (>=1.5.1, <=1.5.4), com.abavilla:fpi-bot-api-parent (>=1.5.1, <=1.5.4) +103 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (21.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.abavilla:fpi-bot-api =1.5.1, =1.5.1, =1.7.0, =1.7.0, =1.5.2, =1.5.2, =1.7....

fr.cnieg.keycloak:attribute-login-provider (>=1.3.9, <=1.3.10), io.phasetwo.keycloak:keycloak-events (>=0.21, <=0.22) +41 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (22.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 22.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.9, =0.21, =0.44, =3.2.8.final,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +35 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (13.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

org.keycloak:keycloak-authz-policy-common (4.6.0.final), org.keycloak:keycloak-dependencies-server-min (4.6.0.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.6.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - org.keycloak:keycloak-authz-policy-common 4.6.0.final -...

fr.cnieg.keycloak:attribute-login-provider (1.4.4), io.phasetwo.keycloak:keycloak-events (>=0.27, <=0.28) +50 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (24.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +31 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (14.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8,...

dev.jcputney:keycloak-theme-additional-info-extension (>=1.1.4, <=1.1.5), org.eclipse.dirigible:dirigible-application (8.18.9) +47 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (23.0.2)

org.keycloak:keycloak-server-spi-private MAVEN version 23.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - dev.jcputney:keycloak-theme-additional-info-extension =1.1.4, =1.1.5 -...

com.github.vzakharchenko:keycloak-plugins (>=0.1, <=1.0.1), com.github.vzakharchenko:mikrotik-radius-plugin (>=0.1, <=1.0.1) +22 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (8.0.1)

org.keycloak:keycloak-server-spi-private MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins =0.1, =0.1, =0.1, =0.1, =2.0.4, =2.0....

io.github.johnjcool:keycloak-cas-services (4.5.0.final), org.keycloak:keycloak-authz-policy-common (4.5.0.final) +10 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (4.5.0.final)

org.keycloak:keycloak-server-spi-private MAVEN version 4.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.5.0.final -...

com.github.vzakharchenko:keycloak-plugins (>=1.1.0, <=1.2.0), com.github.vzakharchenko:mikrotik-radius-plugin (>=1.1.0, <=1.2.0) +19 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (9.0.0)

org.keycloak:keycloak-server-spi-private MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.vzakharchenko:keycloak-plugins =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1....

com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak (24.3.0.0), com.github.wnameless.spring.boot.up:spring-boot-up-keycloak-plugin (24.3.0.0) +64 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-server-spi-private (24.0.5)

org.keycloak:keycloak-server-spi-private MAVEN version 24.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-server-spi-private and may be impacted: - com.github.wnameless.spring.boot.up:spring-boot-up-embedded-keycloak 24.3.0.0 ...