CVE-2026-118959

A flaw exists in the required action provider mechanism of Keycloak . The vulnerability occurs when an authorization request includes the kc_action query parameter set to a mandatory action already assigned to the user (e.g., profile verification or terms and conditions). Due to incorrect handlin...

EUVD-2026-113443

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kcaction query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of...

CVE-2026-118959

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kcaction query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of...

CVE-2026-118959: Red Hat: A flaw was found in the required action provider mechanism of Keycloak

A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kcaction query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of...