GHSA-9FXM-VC8V-HJ55 vulnerabilities

Vulnerabilities for packages: akhq, jenkins-plugin-manager, apache-tika-fips, reposilite, spark-kubernetes-operator, kafbat-ui-fips, neo4j, scala, apache-nifi, request-9047-keycloak-fips, apache-tomee, apache-hop, ruby3.4-jrjackson, jenkins, apache-activemq-fips, dependency-track, druid, flyway,...

PT-2026-52508

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in the client registration service allows a remote attacker with a previously issued Registration Access Token RAT to re-enable a client that was explicitly disabled by an...

PT-2026-52507

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A missing authorization check in the GroupResource.addChild endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing...

PT-2026-52510

Name of the Vulnerable Software and Affected Versions Keycloak Policy Enforcer affected versions not specified Description An issue exists that allows authenticated users to bypass authorization policies, including role, scope, and User-Managed Access UMA permission checks. An attacker can gain...

PT-2026-52592

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A JWT algorithm confusion flaw exists in the JWT Authorization Grant flow. An attacker possessing valid client credentials can bypass signature verification by forging an assertion. This...

PT-2026-52505

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A realm administrator with the manage-realm role can probe arbitrary filesystem paths by submitting an arbitrary path as a keystore parameter during the creation of a key provider component...

PT-2026-52506

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description An issue exists where a remote attacker with administrative privileges, specifically those with manage-client permission or access to client registration endpoints, can bypass client Uniform...

Information Disclosure

Keycloak is vulnerable to Information Disclosure. The vulnerability is due to insufficient enforcement of user profile permissions in the group members endpoint, allowing an administrator with delegated access to read group memberships and users to view user attributes that are explicitly...

Path Equivalence

Overview Affected versions of this package are vulnerable to Path Equivalence in the pathWithoutMatrixParams of AbstractPathMatchingHttpSecurityPolicy via specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes in the request path. An attacker can gain unauthorized...

Improper Access Control

Keycloak is vulnerable to Improper Access Control. The vulnerability is due to insufficient audience restriction enforcement in the OpenID Connect token introspection endpoint, which allows an authenticated confidential client to access sensitive token claims intended for other resource servers...

CVE-2026-48043 vulnerabilities

Vulnerabilities for packages: apache-nifi, docker-selenium, wildfly, wavefront-proxy, neo4j, spark, akhq, strimzi-kafka-operator, infinispan, zipkin, druid, celeborn, apicurio-registry, kserve-modelmesh, apache-pulsar, management-api-for-apache-cassandra-5.0, sonarqube, opensearch, thingsboard,...

GHSA-C2GF-V879-257J vulnerabilities

Vulnerabilities for packages: apache-nifi, docker-selenium, wildfly, wavefront-proxy, neo4j, spark, akhq, strimzi-kafka-operator, infinispan, zipkin, druid, celeborn, apicurio-registry, kserve-modelmesh, apache-pulsar, management-api-for-apache-cassandra-5.0, sonarqube, opensearch, thingsboard,...

CVE-2026-48043 vulnerabilities

Vulnerabilities for packages: commercial-elasticsearch, knative-kafka-broker-fips, akhq, knative-kafka-broker, reposilite, kserve-modelmesh, spark-kubernetes-operator, wavefront-proxy, hadoop-fips, kafbat-ui-fips, docker-selenium, kayenta, kafka-bridge-fips, neo4j, apache-nifi,...

GHSA-C2GF-V879-257J vulnerabilities

Vulnerabilities for packages: commercial-elasticsearch, knative-kafka-broker-fips, akhq, knative-kafka-broker, reposilite, kserve-modelmesh, spark-kubernetes-operator, wavefront-proxy, hadoop-fips, kafbat-ui-fips, docker-selenium, kayenta, kafka-bridge-fips, neo4j, apache-nifi,...

GHSA-6W3V-MCFH-M3Q7 Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

CVE-2026-11986

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

CVE-2026-11986

CVE-2026-11986 involves the Keycloak admin-ui-ext component. The root cause is that certain bulk role-removal endpoints do not perform granular permission checks when deleting role mappings, enabling a delegated administrator with limited permissions to remove highly privileged roles from other u...

EUVD-2026-36267

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...