← All credits
Red Hat would like to thank Paul Bottinelli (Trail of Bits in collaboration with OpenAI) for reporting this issue.
27 vulnerability records and advisories credit this contributor.
CVE-2026-16072
Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation
CVE-2026-15945
Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2
CVE-2026-18211
Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
CVE-2026-16100
Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text
CVE-2026-16443
Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation
CVE-2026-16442
Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction
CVE-2026-16071
Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary