| Keycloak has Improper Access Control that allows attackers with valid credentials to bypass the allowRemoteResourceManagement=falseCVE-2026-4628 · GHSA-4PGC-GFRR-WCMG |
org.keycloak:keycloak-servicesRed Hat Build of Keycloak/keycloak-services |
MavenRed Hat |
متوسط
|
اصلاح اعلام نشده |
|
| Keycloak SMTP Inject VulnerabilityCVE-2025-8419 · GHSA-M4J5-5X4R-2XP9 |
org.keycloak:keycloak-servicesRed Hat Build of Keycloak/keycloak-services |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline JavaScript policy importCVE-2026-120984 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: SAML redirect binding signature bypass via percent-encoded parameter namesCVE-2026-117691 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: UMA Protection API resourceType field not validated — cross-owner resource accessCVE-2026-114232 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Account takeover via stale SSO_AUTH note in Organization identity-first loginCVE-2026-112208 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Unauthenticated JVM termination via SAML 1.1 AuthorityBinding parsing loopCVE-2026-110931 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Unauthenticated CPU exhaustion via SAML 1.1 KeyInfo infinite loopCVE-2026-107602 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Unauthenticated CPU denial of service via SAML XML dateTime and duration parsingCVE-2026-107123 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Protocol mapper with jsonType=JSON bypasses token sanitizationCVE-2026-97848 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authorityCVE-2026-97847 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: DCR azp and sid claim substitution allows Account REST session takeoverCVE-2026-97367 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: CIBA sub parameter injection causes attacker authentication to issue victim tokensCVE-2026-97174 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.rolesCVE-2026-96547 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Indefinite access token renewal via Standard Token Exchange V2CVE-2026-96460 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Stateless token preferred_username fallback enables identity rebindingCVE-2026-96447 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokensCVE-2026-92857 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/keycloak/rhbk-openshift-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| keycloak-services: keycloak-services: Admin API missing audience checkCVE-2026-19688 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk-openshift-rhel9/rhbk-openshift-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| CVE-2026-97175CVE-2026-97175 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| CVE-2026-109081CVE-2026-109081 |
Red Hat Build of Keycloak/keycloak-servicesRed Hat Build of Keycloak/rhbk/keycloak-rhel9 |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
