CVE-2026-16071

mediumPriorität · verfolgen · 0EPSS 0.003 · 24. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.32% (24th) EPSS

CVSS 5.4 · medium

Is it mine?

16 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · bewertet 2026-10-27

A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name (DN). Due to missing validation, the system allows lookups for users located outside the configured search boundary, leading to the disclosure of account information from unauthorized parts of the directory and unintended importing of those users into local storage.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Nsecondary · ENISA EU

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Nsecondary · secalert@redhat.com USAusnutzbarkeit 2.8 · Auswirkung 2.5

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-90USprimärCWE-269US

betroffene Produkte (16)

Betroffene Produkte und Versionsbereiche.

Open Source Keycloak Red Hat build of Keycloa <26.4-22alle Versionencert_bundDE
Open Source Keycloak Red Hat build of Keycloa <26.4.14-1alle Versionencert_bundDE
Open Source Keycloak Red Hat build of Keycloa <26.6-11alle Versionencert_bundDE
Open Source Keycloak Red Hat build of Keycloa <26.6.5-1alle Versionencert_bundDE
Open Source Keycloak≤ Red Hat build of Keycloa <26.6.5-1cert_bundDE
Open Source Keycloak≤ Red Hat build of Keycloa <26.4-22cert_bundDE
Open Source Keycloak≤ Red Hat build of Keycloa <26.4.14-1cert_bundDE
Open Source Keycloak≤ Red Hat build of Keycloa <26.6-11cert_bundDE
Red Hat Red Hat build of Keycloak 26.4< 26.4-22enisa_euvdEU
Red Hat Red Hat build of Keycloak 26.4< 26.4.14-1enisa_euvdEU
Red Hat Red Hat build of Keycloak 26.6< 26.6-11enisa_euvdEU
Red Hat Red Hat build of Keycloak 26.6< 26.6.5-1enisa_euvdEU
redhat build of keycloak26.4 → 26.4.14nvdUScpe:2.3:a:redhat:build_of_keycloak:*:*:*:*:*:*:*:*
redhat build of keycloak26.6 → 26.6.5nvdUScpe:2.3:a:redhat:build_of_keycloak:*:*:*:*:*:*:*:*
Bitnami keycloak26.4.0 → 26.4.14osvUSpkg:bitnami/keycloak
Bitnami keycloak26.6.0 → 26.6.5osvUSpkg:bitnami/keycloak

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2026-2677RedHat Build of Keycloak: Mehrere SchwachstellenDeutsch2026-08-05csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Administratorrechte zu erlangen, Benutzerkonten zu übernehmen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder einen Denial-of-Service-Zustand herbeizuführen.
BIT-keycloak-2026-16071Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary2026-08-25vendor · osvUS
A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a delegated administrator performs a search using a specific LDAP entry Distinguished Name (DN). Due to missing validation, the system allows lookups for users located outside the configured search boundary, leading to the disclosure of account information from unauthorized parts of the directory and unintended importing of those users into local storage.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund nvd osv NVD CVE.org MITRE

veröffentlicht 2026-08-05geändert 2026-08-31

verwandt (113)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2016-9299US	critical9.8	96.9% (100th)	Exploit	2017-01-12
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP quer…
CVE-2026-49268US	critical9.1	0.51% (43rd)	Exploit	2026-06-17
A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated…
CVE-2021-43350US	critical9.8	4.76% (92nd)	—	2021-11-11
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject unsanitized…
CVE-2017-14596US	critical9.8	6.88% (94th)	—	2017-09-20
In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password.
CVE-2021-41232US	critical9.8	1.52% (74th)	—	2021-11-02
Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances w…

+108 weitere

Referenzen (18)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan