DeutschShown in its original language — a full translation is planned for a future version.
Keycloak: Mehrere Schwachstellen
view advisory published 2026-08-02
Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und sensible Informationen offenzulegen.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-18573US | —OT elevated | — | ||
A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator conf… | ||||
| CVE-2026-18572US | —OT elevated | — | ||
Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours).… | ||||
| CVE-2026-18571US | high7.2OT elevated | — | ||
A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to cr… | ||||
| CVE-2026-18570US | —OT elevated | — | ||
A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during clie… | ||||
| CVE-2026-53573US | — | — | ||
GeoNetwork is a catalog application to manage spatially referenced resources. From 3.12.0 until 4.2.16 and 4.4.11, unsafe redirect validation in GeonetworkOAuth2LoginAuthentication… | ||||
| CVE-2026-18218US | medium5.4OT elevated | — | ||
A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application (client) usin… | ||||
| CVE-2026-18217US | medium4.7 | — | ||
A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication… | ||||
| CVE-2026-18215US | high8.1 | — | ||
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is i… | ||||
| CVE-2026-18214US | high8.1OT elevated | — | ||
Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange fe… | ||||
| CVE-2026-18211US | medium5.4 | — | ||
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configu… | ||||
| CVE-2026-18209US | medium4.7 | — | ||
A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to p… | ||||
| CVE-2026-18208US | —OT elevated | — | ||
A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management solution used to secure mode… | ||||
| CVE-2026-18206US | low3.7 | — | ||
A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard… | ||||
| CVE-2026-18203US | —OT elevated | — | ||
A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend permissions to child groups, the… | ||||
| CVE-2026-16105US | —OT elevated | — | ||
A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorizati… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
- GitHub Advisory Database vom 2026-08-02external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan