CVE-2026-96453

The Keycloak Admin CLI (kcadm tool) is vulnerable to a flaw where it incorrectly accepts arbitrary self-signed certificates when a custom truststore is used to verify server identity, provided the hostname matches. A network attacker can exploit this to impersonate the Keycloak server , potential...