Lucene search
+L

Server-Side Request Forgery (SSRF)

🗓️ 05 Feb 2026 09:45:13Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 8 Views

Keycloak is vulnerable to Server Side Forgery via misvalidated backchannel endpoints in CIBA.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-1518
2 Feb 202607:17
attackerkb
CNNVD
Keycloak 代码问题漏洞
2 Feb 202600:00
cnnvd
CVE
CVE-2026-1518
2 Feb 202607:17
cve
Cvelist
CVE-2026-1518 Keycloak: blind server-side request forgery (ssrf) via ciba backchannel notification endpoint in keycloak
2 Feb 202607:17
cvelist
EUVD
EUVD-2026-5130
2 Feb 202607:17
euvd
Github Security Blog
Keycloak Server-Side Request Forgery (SSRF) vulnerability
2 Feb 202609:30
github
NVD
CVE-2026-1518
2 Feb 202608:16
nvd
OSV
GHSA-FWHW-CHW4-GH37 Keycloak Server-Side Request Forgery (SSRF) vulnerability
2 Feb 202609:30
osv
Positive Technologies
PT-2026-5623
2 Feb 202600:00
ptsecurity
RedhatCVE
CVE-2026-1518
2 Feb 202607:17
redhatcve
Rows per page
Vulners
Node
OR
keycloak-serviceskeycloak-servicesRange1.0-alpha-126.5.2java
keycloak-parentkeycloak-parentMatch3.4.0.finaljava
keycloak-parentkeycloak-parentMatch1.7.0.finaljava
keycloak-parentkeycloak-parentMatch1.9.4.finaljava
keycloak-parentkeycloak-parentMatch4.7.0.finaljava
keycloak-parentkeycloak-parentMatch1.2.0.beta1java
keycloak-parentkeycloak-parentMatch1.9.2.finaljava
keycloak-parentkeycloak-parentMatch1.9.3.finaljava
keycloak-parentkeycloak-parentMatch4.0.0.finaljava
keycloak-parentkeycloak-parentMatch1.3.0.finaljava
keycloak-parentkeycloak-parentMatch1.1.0.beta2java
keycloak-parentkeycloak-parentMatch1.8.0.alpha1java
keycloak-parentkeycloak-parentMatch1.4.0.finaljava
keycloak-parentkeycloak-parentMatch2.0.0.finaljava
keycloak-parentkeycloak-parentMatch1.6.0.finaljava
keycloak-parentkeycloak-parentMatch1.0.3.finaljava
keycloak-parentkeycloak-parentMatch1.9.1.finaljava
keycloak-parentkeycloak-parentMatch2.5.4.finaljava
keycloak-parentkeycloak-parentMatch2.5.0.finaljava
keycloak-parentkeycloak-parentMatch4.1.0.finaljava
keycloak-parentkeycloak-parentMatch1.0-alpha-1java
keycloak-parentkeycloak-parentMatch2.5.1.finaljava
keycloak-parentkeycloak-parentMatch2.2.1.finaljava
keycloak-parentkeycloak-parentMatch1.0-alpha-1-12062013java
keycloak-parentkeycloak-parentMatch1.5.1.finaljava
keycloak-parentkeycloak-parentMatch4.0.0.beta3java
keycloak-parentkeycloak-parentMatch1.9.0.finaljava
keycloak-parentkeycloak-parentMatch3.1.0.finaljava
keycloak-parentkeycloak-parentMatch4.5.0.finaljava
keycloak-parentkeycloak-parentMatch4.2.0.finaljava
keycloak-parentkeycloak-parentMatch1.2.0.finaljava
keycloak-parentkeycloak-parentMatch3.4.3.finaljava
keycloak-parentkeycloak-parentMatch4.0.0.beta1java
keycloak-parentkeycloak-parentMatch2.1.0.finaljava
keycloak-parentkeycloak-parentMatch2.2.0.finaljava
keycloak-parentkeycloak-parentMatch1.1.0.finaljava
keycloak-parentkeycloak-parentMatch1.0.1.finaljava
keycloak-parentkeycloak-parentMatch3.2.1.finaljava
keycloak-parentkeycloak-parentMatch1.1.1.finaljava
keycloak-parentkeycloak-parentMatch1.0-beta-1-20150523java
keycloak-parentkeycloak-parentMatch3.4.1.finaljava
keycloak-parentkeycloak-parentMatch1.1.0.beta1java
keycloak-parentkeycloak-parentMatch1.0.5.finaljava
keycloak-parentkeycloak-parentMatch1.8.0.finaljava
keycloak-parentkeycloak-parentMatch1.0.4.finaljava
keycloak-parentkeycloak-parentMatch1.9.5.finaljava
keycloak-parentkeycloak-parentMatch4.0.0.beta2java
keycloak-parentkeycloak-parentMatch3.0.0.finaljava
keycloak-parentkeycloak-parentMatch1.0-alpha-2java
keycloak-parentkeycloak-parentMatch4.6.0.finaljava
keycloak-parentkeycloak-parentMatch3.3.0.finaljava
keycloak-parentkeycloak-parentMatch4.4.0.finaljava
keycloak-parentkeycloak-parentMatch1.5.0-finaljava
keycloak-parentkeycloak-parentMatch2.5.5.finaljava
keycloak-parentkeycloak-parentMatch1.0-alpha-4java
keycloak-parentkeycloak-parentMatch1.6.1.finaljava
keycloak-parentkeycloak-parentMatch3.2.0.finaljava
keycloak-parentkeycloak-parentMatch4.8.0.finaljava
keycloak-parentkeycloak-parentMatch4.2.1.finaljava
keycloak-parentkeycloak-parentMatch1.0-beta-1-20150521java
keycloak-parentkeycloak-parentMatch1.3.1.finaljava
keycloak-parentkeycloak-parentMatch1.8.1.finaljava
keycloak-parentkeycloak-parentMatch2.4.0.finaljava
keycloak-parentkeycloak-parentMatch4.8.3.finaljava
keycloak-parentkeycloak-parentMatch1.0-alpha-3java
keycloak-parentkeycloak-parentMatch1.0.2.finaljava
keycloak-parentkeycloak-parentMatch1.9.7.finaljava
keycloak-parentkeycloak-parentMatch3.4.2.finaljava
keycloak-parentkeycloak-parentMatch1.9.8.finaljava
keycloak-parentkeycloak-parentMatch1.5.0.finaljava
keycloak-parentkeycloak-parentMatch2.3.0.finaljava
keycloak-parentkeycloak-parentMatch4.8.2.finaljava
keycloak-parentkeycloak-parentMatch4.3.0.finaljava
keycloak-parentkeycloak-parentMatch4.8.1.finaljava
keycloak-parentkeycloak-parentRange1.0-alpha-126.5.2java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

18 Jul 2026 13:31Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.12.7
EPSS0.00236
SSVC
8