EUVD-2026-83467

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.0.8 via the 'studentid' parameter due to missing validation on a user controlled key. This makes it possible for authenticated...

EUVD-2026-83465

The WPComplete plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'empty' Shortcode Attribute in all versions up to, and including, 2.9.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

CVE-2026-55866

A flaw was found in SpiceDB, an open-source database system for managing application permissions. Under specific conditions, including concurrent permission checks and an enabled dispatch result cache, the system can incorrectly grant unconditional permission. This vulnerability arises because...

CLEANSTART-2026-BZ49747 In Eclipse Vert

CVE-2026-15075 affects multiple packages. In Eclipse Vert. See references for individual vulnerability details...

CLEANSTART-2026-CJ40397 flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component

Security vulnerability affects the keycloak package. A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component...

CLEANSTART-2026-MZ50851 flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled

Security vulnerability affects the keycloak package. A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 FGAP V2 is enabled...

CLEANSTART-2026-BB61412 flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak...

CLEANSTART-2026-QD34582 flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak...

CLEANSTART-2026-IG03697 Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours)

Security vulnerability affects the keycloak package. Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies for example, only allowing access during business hours...

CLEANSTART-2026-KM02072 flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows

Security vulnerability affects the keycloak package. A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows...

CLEANSTART-2026-HP97605 flaw was found in the RoleContainerResource component of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the RoleContainerResource component of Keycloak...

CLEANSTART-2026-EF95480 flaw was found in the organization management component of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the organization management component of Keycloak...

CLEANSTART-2026-YL24808 flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management

Security vulnerability affects the keycloak package. A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management...

CLEANSTART-2026-RY77599 Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains

Security vulnerability affects the keycloak package. Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains...

CLEANSTART-2026-GB37349 flaw was found in the admin REST API of Keycloak, a solution for identity and access management

Security vulnerability affects the keycloak package. A flaw was found in the admin REST API of Keycloak, a solution for identity and access management...

CLEANSTART-2026-ZF70449 flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution

Security vulnerability affects the keycloak package. A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution...

CLEANSTART-2026-AH74122 Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication

Security vulnerability affects the keycloak package. Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication...

CLEANSTART-2026-HB26759 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant)

Security vulnerability affects the keycloak package. Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant...

CLEANSTART-2026-LI01273 flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows

Security vulnerability affects the keycloak package. A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect OIDC authentication flows...

CLEANSTART-2026-PI18525 flaw was found in the TokenManager component of the Keycloak identity management service

Security vulnerability affects the keycloak package. A flaw was found in the TokenManager component of the Keycloak identity management service...