CVE-2026-18571 Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

EUVD-2026-51925

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

CVE-2026-18571 Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

CVE-2026-18571

CVE-2026-18571 affects Keycloak’s user creation flow when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. The flaw lets a sub-administrator with permission to create users add those users to any group, including groups the administrator isn’t authorized to manage, potentially enabling una...

CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

CVE-2026-13339

creationtimestamp| type| source ---|---|--- 2026-08-02 01:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2rtm67nw2n 2026-08-02 08:36:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms3ldebc5q2e 2026-08-02 08:36:59+00:00| seen|...

CVE-2026-51954

creationtimestamp| type| source ---|---|--- 2026-08-02 00:00:07+00:00| seen| Telegram/uaJgeobsmMXpPI5RgjN2GQTZDxY3uvuK9RjA2OXMpGho 2026-08-03 03:29:36+00:00| published-proof-of-concept| Telegram/uaJgeobsmMXpPI5RgjN2GQTZDxY3uvuK9RjA2OXMpGho 2026-09-22 07:00:05+00:00| seen|...

PT-2026-67004

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description Bluetooth Mesh subnet key management fails to release a PSA Crypto key slot during subnet-key teardown. In the subsys/bluetooth/mesh/subnet.c file, the net keys create function imports the...

CVE-2026-18571: Missing Authorization

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could...

PT-2026-67136

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the user creation component when Fine-Grained Admin Permissions V2 FGAP V2 is enabled. This issue allows a sub-administrator who has permission to create users to assign tho...

CVE-2026-67334

creationtimestamp| type| source ---|---|--- 2026-08-01 22:05:38+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3ms2i2oy2u22r 2026-08-01 22:05:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2i2p5vtn2e 2026-08-01 23:20:04+00:00| seen|...

CVE-2026-67292

creationtimestamp| type| source ---|---|--- 2026-08-01 20:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpofl4v2m 2026-08-04 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msapafceeg2s 2026-08-05 02:18:03+00:00| seen|...

CVE-2026-67322

creationtimestamp| type| source ---|---|--- 2026-08-01 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2b3pco2k2x 2026-09-08 16:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rwj8-pgh3-r573...

CVE-2026-55733

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-54894

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.toatom/1. basekey/1 in...

CVE-2026-55734

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian Guardian.Permissions module allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines...

CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...

CVE-2026-55733

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.toatom/1. When encode/3 in...