← All credits

Red Hat would like to thank Ap4sh (Samy Medjahed) and Ethicxz (Eliott Laurie) for reporting this issue.

1 vulnerability record and advisories credit this contributor.

CVE-2026-105305
Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement