EUVD-2026-117964

A flaw was found in Keycloak's administrative services org.keycloak.services.resources.admin. A highly privileged attacker, authenticated with a 'manage-clients' role, could exploit this vulnerability through several methods, including manipulating client JSON Web Key Sets JWKS, swapping client...

CVE-2026-9797

A flaw in Keycloak's administrative services (org.keycloak.services.resources.admin) allows a highly privileged attacker with the 'manage-clients' role to perform privilege escalation . Attackers can exploit this by manipulating client JSON Web Key Sets (JWKS), swapping client authenticator types...