← All credits
Red Hat would like to thank Paul Bottinelli (Trail of Bits in collaboration with OpenAI) for reporting this issue.
27 vulnerability records and advisories credit this contributor.
CVE-2026-18572
Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes
CVE-2026-18570
Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed
CVE-2026-18218
Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero
CVE-2026-18215
Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant
CVE-2026-18214
Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction
CVE-2026-18201
Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations
CVE-2026-16108
Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2
CVE-2026-16104
Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins
CVE-2026-16093
Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers
CVE-2026-16089
Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session