org.keycloak:keycloak-saml-as7-adapter-dist (6.0.1), org.keycloak:keycloak-saml-as7-modules (6.0.1) +21 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (6.0.1)

org.keycloak:keycloak-saml-adapter-core MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-as7-adapter-dist 6.0.1 -...

org.keycloak:keycloak-broker-saml (1.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (1.2.0.cr1) +1 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (1.2.0.cr1)

org.keycloak:keycloak-saml-core MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-broker-saml 1.2.0.cr1 - org.keycloak:keycloak-dependencies-server-all...

org.keycloak:keycloak-saml-jetty-adapter-core (1.6.0.final), org.keycloak:keycloak-saml-jetty81-adapter (1.6.0.final) +17 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (1.6.0.final)

org.keycloak:keycloak-saml-adapter-core MAVEN version 1.6.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-adapter-core and may be impacted: - org.keycloak:keycloak-saml-jetty-adapter-core 1.6.0.final -...

org.keycloak:keycloak-dependencies-server-all (11.0.1), org.keycloak:keycloak-saml-adapter-api-public (11.0.1) +24 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (11.0.1)

org.keycloak:keycloak-saml-core MAVEN version 11.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.1 -...

org.keycloak:keycloak-saml-adapter-api-public (4.0.0.final), org.keycloak:keycloak-saml-adapter-core (4.0.0.final) +25 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-core (4.0.0.final)

org.keycloak:keycloak-saml-core MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-saml-core and may be impacted: - org.keycloak:keycloak-saml-adapter-api-public 4.0.0.final -...

org.keycloak:keycloak-account-freemarker (1.8.0.cr2), org.keycloak:keycloak-broker-oidc (1.8.0.cr2) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.8.0.cr2)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr2 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

org.keycloak:keycloak-account-freemarker (1.6.1.final), org.keycloak:keycloak-broker-oidc (1.6.1.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.6.1.final)

org.keycloak:keycloak-services MAVEN version 1.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.6.1.final - org.keycloak:keycloak-broker-oidc...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.1.0-beta.2), org.keycloak:keycloak-account-freemarker (1.2.0.final) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.2.0.final)

org.keycloak:keycloak-services MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.1.0-beta.2 -...

org.keycloak:keycloak-account-freemarker (1.2.0.cr1), org.keycloak:keycloak-broker-oidc (1.2.0.cr1) +8 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.cr1 - org.keycloak:keycloak-broker-oidc 1.2.0.cr...

EUVD-2026-12690

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-794g-x443-36f7. This link is maintained to preserve external references. Original Description A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly...

org.keycloak:keycloak-account-freemarker (1.8.0.cr1), org.keycloak:keycloak-broker-oidc (1.8.0.cr1) +9 more potentially affected by CVE-2026-2603 via org.keycloak:keycloak-services (1.8.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.8.0.cr1 - org.keycloak:keycloak-broker-oidc 1.8.0.cr...

CVE-2026-2575

Keycloak vulnerability CVE-2026-2575 allows an unauthenticated attacker to trigger an application‑level DoS by sending a highly compressed SAMLRequest via the Redirect Binding. The server does not enforce size limits during DEFLATE decompression, causing an OutOfMemoryError and possible process t...

CVE-2026-2575

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service DoS by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE decompression, leading to an OutOfMemoryErro...

org.bedework.deploy:bw-wf-feature-pack (>=4.1.0, <=5.0.0), org.bedework.deploy:bw-wf-keycloak-saml-filter-feature-pack (>=4.0.3, <=5.0.0) +39 more potentially affected by CVE-2026-2575 via org.keycloak:keycloak-saml-adapter-core (>=1.6.0.final, <=26.5.3)

org.keycloak:keycloak-saml-adapter-core MAVEN version =1.6.0.final, =4.1.0, =4.0.3, =21.1.0, =3.4.2.final, =3.4.2.final, =11.0.0, =21.1.0, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =1.6.0.final, =2.1.0.cr1, =2.1.0.cr1, =18.0.2 and more Source cves: CVE-2026-2575 Source...

CVE-2026-2092

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

CVE-2026-2603

CVE-2026-2603 affects Keycloak: an attacker can bypass security by sending a valid SAML response from an external IdP to the Keycloak SAML endpoint for IdP-initiated broker logins, enabling unauthorized authentication. The issue is described across multiple sources (NVD/EUVD/GHSA) with a CVSS v3....

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

CVE-2026-2603

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider IdP to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity...

CVE-2026-2092

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...