← All credits
Red Hat would like to thank Paul Bottinelli of Trail of Bits in collaboration with OpenAI for reporting this issue.
4 vulnerability records and advisories credit this contributor.
CVE-2026-107121
Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade
CVE-2026-94001
Keycloak-services: keycloak-services: admin credential delete bypasses denied reset-password permission
CVE-2026-19608
Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies
CVE-2026-97177
Keycloak-services: keycloak-services: generic user update bypasses denied reset-password permission