DeutschShown in its original language — a full translation is planned for a future version.
Keycloak: Mehrere Schwachstellen
view advisory published 2026-04-06
Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Daten zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-4636US | — | — | ||
A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resourc… | ||||
| CVE-2026-4634US | — | — | ||
A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the… | ||||
| CVE-2026-4325US | — | — | ||
A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an attacker to delete arbi… | ||||
| CVE-2026-4282US | — | Exploit | ||
A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacke… | ||||
| CVE-2026-3872US | — | — | ||
A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (… | ||||
| CVE-2026-1002US | medium5.3 | — | ||
The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.
The issue comes… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:25089 vom 2026-06-10external
- Red Hat Security Advisory RHSA-2026:6475 vom 2026-04-02external
- Red Hat Security Advisory RHSA-2026:6476 vom 2026-04-02external
- Red Hat Security Advisory RHSA-2026:6477 vom 2026-04-02external
- Red Hat Security Advisory RHSA-2026:6478 vom 2026-04-02external
- Red Hat Security Advisory RHSA-2026:7380 vom 2026-04-15external
- GitHub Security Advisory GHSA-cjm2-j6cm-6p6m vom 2026-04-06external
- GitHub Security Advisory GHSA-f2hx-5fx3-hmcv vom 2026-04-06external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan