org.keycloak:keycloak-saml-adapter-galleon-pack (22.0.0), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (22.0.0) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (22.0.0)

org.keycloak:keycloak-saml-adapter-core MAVEN version 22.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 22.0.0 -...

org.keycloak:keycloak-dependencies-server-all (10.0.2), org.keycloak:keycloak-saml-adapter-api-public (10.0.2) +23 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (10.0.2)

org.keycloak:keycloak-saml-core MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.2 -...

org.keycloak:keycloak-saml-jetty-adapter-core (1.9.0.cr1), org.keycloak:keycloak-saml-jetty81-adapter (1.9.0.cr1) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.9.0.cr1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.9.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (2.3.0.cr1), org.keycloak:keycloak-saml-adapter-api-public (2.3.0.cr1) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (2.3.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 2.3.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 2.3.0.cr1 -...

org.keycloak:keycloak-saml-as7-adapter-dist (8.0.1), org.keycloak:keycloak-saml-as7-modules (8.0.1) +19 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (8.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 8.0.1 -...

org.keycloak:keycloak-saml-adapter-galleon-pack (22.0.4), org.keycloak:keycloak-saml-jakarta-servlet-filter-adapter (22.0.4) +16 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (22.0.4)

org.keycloak:keycloak-saml-adapter-core MAVEN version 22.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-adapter-galleon-pack 22.0.4 -...

Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-794g-x443-36f7. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly...

EUVD-2026-12690

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.1.0-beta.2), org.keycloak:keycloak-account-freemarker (1.2.0.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.2.0.final)

org.keycloak:keycloak-services MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.1.0-beta.2 -...

org.keycloak:keycloak-account-freemarker (1.6.1.final), org.keycloak:keycloak-broker-oidc (1.6.1.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.6.1.final)

org.keycloak:keycloak-services MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.6.1.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.8.0.cr1), org.keycloak:keycloak-broker-oidc (1.8.0.cr1) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.8.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr1 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

org.keycloak:keycloak-account-freemarker (1.8.0.cr2), org.keycloak:keycloak-broker-oidc (1.8.0.cr2) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.8.0.cr2)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

org.keycloak:keycloak-account-freemarker (1.2.0.cr1), org.keycloak:keycloak-broker-oidc (1.2.0.cr1) +8 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.cr1 - org.keycloak:keycloak-broker-oidc 1.2.0.cr...

CVE-2026-2575

Keycloak vulnerability CVE-2026-2575 allows an unauthenticated attacker to trigger an application‑level DoS by sending a highly compressed SAMLRequest via the Redirect Binding. The server does not enforce size limits during DEFLATE decompression, causing an OutOfMemoryError and possible process t...

CVE-2026-2575

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

org.bedework.deploy:bw-wf-feature-pack (>=4.1.0, <=5.0.0), org.bedework.deploy:bw-wf-keycloak-saml-filter-feature-pack (>=4.0.3, <=5.0.0) +39 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (>=1.6.0.final, <=26.5.3)

org.keycloak:keycloak-saml-adapter-core MAVEN version =1.6.0.final, =4.1.0, =4.0.3, =21.1.0, =3.4.2.final, =3.4.2.final, =11.0.0, =21.1.0, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =2.1.0.cr1, =2.1.0.cr1, =18.0.2 and more Source cves: CVE-2026-2575 Source...

CVE-2026-2092

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

CVE-2026-2603

CVE-2026-2603 affects Keycloak: an attacker can bypass security by sending a valid SAML response from an external IdP to the Keycloak SAML endpoint for IdP-initiated broker logins, enabling unauthorized authentication. The issue is described across multiple sources (NVD/EUVD/GHSA) with a CVSS v3....

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...