Summary
Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um falsche Informationen darzustellen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.
Product
Keycloak ermöglicht Single Sign-On mit Identity and Access Management für moderne Anwendungen und Dienste.
Vulnerabilities 7
-
High 8.1CVE-2026-11800 Public exploit
Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion
A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthorized acces…
-
High 8.1
Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path wi…
-
High 7.7
Keycloak: group-admin escalation to realm-admin
A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin Permissi…
-
High 7.3CVE-2026-9086 Public exploit
Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass
A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could bypass client Uniform Resource Identifier (URI) validation. This is achieved b…
-
Medium 6.5
Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token
A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This bypasses …
-
Medium 4.9
Keycloak: keycloak: information disclosure through arbitrary filesystem path probing
A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator to probe a…
-
Medium 4.6
Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass
A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. This allows…
Revision history
-
#5
Neue Updates aufgenommen
-
#4
Neue Updates aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-gqj5-2xp5-3qmp
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-7pm9-g8jh-3m74
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-37j9-56gh-j2r7
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-79qw-g39g-mfxc
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-q929-g23j-2rc7
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-gfv4-4vr2-rr4g
-
GitHub Advisory Database vom 2026-06-25
https://github.com/advisories/GHSA-rmcj-82cr-27rx
-
Red Hat Security Advisory RHSA-2026:36013 vom 2026-07-08
https://access.redhat.com/errata/RHSA-2026:36013
-
Red Hat Security Advisory RHSA-2026:36002 vom 2026-07-08
https://access.redhat.com/errata/RHSA-2026:36002
-
Red Hat Security Advisory RHSA-2026:50847 vom 2026-08-05
https://access.redhat.com/errata/RHSA-2026:50847
-
Red Hat Security Advisory RHSA-2026:50846 vom 2026-08-05
https://access.redhat.com/errata/RHSA-2026:50846
-
### vom 2026-08-31
https://www.keycloak.org/2026/08/keycloak-2673-released
-
Keycloak 26.8.2 Release Notes vom 2026-11-05
https://www.keycloak.org/2026/11/keycloak-2682-released