oscerd/CVE-2026-23552

PoC

CVE-2026-23552 - Cross-Realm Token Acceptance in camel-keycloak

view exploit source poc_in_githubauthor oscerdpublished 2026-02-09catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-23552US	—	0.61% (49th)	Exploit	2026-02-23
Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy Apache Camel Keycloak component. The Camel-Keycloak KeycloakSecurityPolicy does not validate the iss (issuer) claim…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.