DeutschShown in its original language — a full translation is planned for a future version.
Keycloak: Mehrere Schwachstellen
view advisory published 2026-07-05
Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder erweiterte Berechtigungen zu erlangen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-14781US | — | — | ||
A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified claim. When an OIDC identity provider is configured with tru… | ||||
| CVE-2026-14615US | low2.7 | — | ||
A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative services. When FGAP v2 is enabled, the system fails to properly fil… | ||||
| CVE-2026-14614US | — | — | ||
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled. This issue allows a delegated administrator,… | ||||
| CVE-2026-14613US | medium4.9 | — | ||
A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:50846 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:50847 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:50848 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:50849 vom 2026-08-05external
- Red Hat Security Advisory RHSA-2026:56523 vom 2026-08-19external
- Red Hat Security Advisory RHSA-2026:56524 vom 2026-08-18external
- Red Hat Bugtracker 2496878 vom 2026-07-05external
- Red Hat Bugtracker 2496889 vom 2026-07-05external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan