Keycloak: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 8

• Medium 5.5
  CVE-2026-15943

  Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

  A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper va…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 5.4
  CVE-2026-16089

  Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session

  A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 authorization codes are not properly bound to the client that originally requested them. An attacker who can intercept an authorization code c…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 5.4
  CVE-2026-16093

  Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers

  Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credent…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 4.9
  CVE-2026-16072

  Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation

  A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through …

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 4.9
  CVE-2026-16106

  Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles

  A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role from a composite role. Due to missing authorization checks, an attacker with lim…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 4.3
  CVE-2026-16103

  Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption

  A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Initiated Backchannel Authentication (CIBA) initiation handler but were omitted fr…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 4.3
  CVE-2026-16104

  Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

  A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration …

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026
• Medium 4.3
  CVE-2026-16108

  Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2

  A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-vie…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Jul 17, 2026

Revision history

1. 2026-11-08 #5

   Neue Updates von Red Hat aufgenommen

2. 2026-11-05 #4

   Neue Updates von Red Hat aufgenommen

3. 2026-09-16 #3

   Neue Updates von Red Hat aufgenommen

4. 2026-08-30 #2

   Neue Updates aufgenommen

5. 2026-07-19 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-RPFH-MGXM-C6HC
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-MP76-M6C2-JQH5
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-63WM-FVW8-H2HP
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-JMHG-9C54-P575
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-MVWH-6438-3V8W
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-78MV-PHQ4-25FV
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-V7M3-VPQR-6M6P
• GitHub Advisory Database vom 2026-07-19
  https://github.com/advisories/GHSA-QH48-WWV4-FMR8
• Red Hat Bugtracker 2501270 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501270
• Red Hat Bugtracker 2501721 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501721
• Red Hat Bugtracker 2501724 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501724
• Red Hat Bugtracker 2501729 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501729
• Red Hat Bugtracker 2501736 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501736
• Red Hat Bugtracker 2501737 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501737
• Red Hat Bugtracker 2501739 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501739
• Red Hat Bugtracker 2501740 vom 2026-07-19
  https://bugzilla.redhat.com/show_bug.cgi?id=2501740
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45164
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45173
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45176
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45222
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45223
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45224
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45225
• EU Vulnerability Database vom 2026-07-19
  https://euvd.enisa.europa.eu/enisa/EUVD-2026-45226
• ### vom 2026-08-31
  https://www.keycloak.org/2026/08/keycloak-2673-released
• Red Hat Security Advisory RHSA-2026:68277 vom 2026-09-16
  https://access.redhat.com/errata/RHSA-2026:68277
• Red Hat Security Advisory RHSA-2026:68278 vom 2026-09-16
  https://access.redhat.com/errata/RHSA-2026:68278
• Red Hat Security Advisory RHSA-2026:95761 vom 2026-11-06
  https://access.redhat.com/errata/RHSA-2026:95761
• Red Hat Security Advisory RHSA-2026:95762 vom 2026-11-06
  https://access.redhat.com/errata/RHSA-2026:95762