EUVD-2026-39471

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

CVE-2026-9800

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

CVE-2026-9800 Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

CVE-2026-9799

A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access UMA permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows the user to gain unauthorized access to...

CVE-2026-9705

A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token RAT, could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses security controls, allowing the attacker...

CVE-2026-9099

A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin Permissions v2 FGAPv2 is enabled, an attacker wi...

CVE-2026-9086

A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, could bypass client Uniform Resource Identifier URI validation. This is achieved by registering a malicious client with a...

CVE-2026-9800

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

Cross-site Scripting (XSS)

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the client URI validation process. An attacker can execute arbitrary scripts in...

GHSA-J3RV-43J4-C7QM vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

GHSA-RCQC-6CW3-H962 vulnerabilities

Vulnerabilities for packages: scala, dependency-track, ruby3.4-jrjackson, keycloak, logstash, kafbat-ui, airbyte-server-fips, flyway-fips, management-api-for-apache-cassandra-4.0, solr, nacos-docker, pinot-fips, request-9047-keycloak-fips, ruby3.2-jrjackson, druid, keycloak-config-cli, akhq, neo4...

CVE-2026-54514 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

CVE-2026-54512 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

CVE-2026-54516 vulnerabilities

Vulnerabilities for packages: scala, dependency-track, ruby3.4-jrjackson, keycloak, logstash, kafbat-ui, airbyte-server-fips, flyway-fips, management-api-for-apache-cassandra-4.0, solr, nacos-docker, pinot-fips, request-9047-keycloak-fips, ruby3.2-jrjackson, druid, keycloak-config-cli, akhq, neo4...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: scala, dependency-track, ruby3.4-jrjackson, keycloak, logstash, kafbat-ui, airbyte-server-fips, flyway-fips, management-api-for-apache-cassandra-4.0, solr, nacos-docker, pinot-fips, request-9047-keycloak-fips, ruby3.2-jrjackson, druid, keycloak-config-cli, akhq, neo4...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

GHSA-RMJ7-2VXQ-3G9F vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

CVE-2026-54513 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, nacos-docker, hadoop-client-modules, kayenta, apache-hop-fips, apache-nifi, pinot, logstash-fips, zipkin, knative-kafka-broker, conductor, apache-activemq, kafka, localstack, kserve-modelmesh, dependency-track-apiserver,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: scala, dependency-track, ruby3.4-jrjackson, keycloak, logstash, kafbat-ui, airbyte-server-fips, flyway-fips, management-api-for-apache-cassandra-4.0, solr, nacos-docker, pinot-fips, request-9047-keycloak-fips, ruby3.2-jrjackson, druid, keycloak-config-cli, akhq, neo4...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: scala, dependency-track, ruby3.4-jrjackson, keycloak, logstash, kafbat-ui, airbyte-server-fips, flyway-fips, management-api-for-apache-cassandra-4.0, solr, nacos-docker, pinot-fips, request-9047-keycloak-fips, ruby3.2-jrjackson, druid, keycloak-config-cli, akhq, neo4...