← All credits

Red Hat would like to thank Bruno Oliveira of IBM in collaboration with OpenAI for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-96447
Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding
CVE-2026-90997
Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch