← All credits
Red Hat would like to thank Joy Gilbert and Reynaldo Immanuel for reporting this issue.
5 vulnerability records and advisories credit this contributor.
CVE-2026-1609
Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users
CVE-2026-2603
Keycloak: keycloak: unauthorized authentication via disabled saml identity provider
CVE-2026-8922
Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services
CVE-2026-2366
Keycloak: keycloak: information disclosure via authorization bypass in admin api
CVE-2026-2733
Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol