Keycloak: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 5

• Critical 9.1
  CVE-2026-18963 Public exploit Scanner template

  Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

  A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for a…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6 Wolfi Maven
  Aug 18, 2026
• High 7.3
  CVE-2026-15571

  Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client

  A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6
  Aug 18, 2026
• Medium 6.5
  CVE-2026-59888

  jackson-databind: @JsonIgnore on a Record property is bypassed with a PropertyNamingStrategy

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a PropertyNamingStrategy can bypass @JsonIgnore because POJOPropertiesCollector…

  FasterXML jackson-databind druid trino Ubuntu Wolfi Maven
  Jul 14, 2026
• Medium 6.5
  CVE-2026-59889

  jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization

  jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrap…

  FasterXML jackson-databind druid thingsboard-tb-node Ubuntu Wolfi Maven
  Jul 14, 2026
• Medium 5.3
  CVE-2026-45292

  opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation

  opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the baggage propagation implementation in opentelemetry-api and opente…

  open-telemetry io.opentelemetry opentelemetry-java opentelemetry-extension-trace-propagators Maven
  May 28, 2026

Revision history

1. 2026-11-12 #6

   Neue Updates von Red Hat aufgenommen

2. 2026-11-10 #5

   Neue Updates von IBM aufgenommen

3. 2026-09-30 #4

   Neue Updates aufgenommen

4. 2026-09-07 #3

   Neue Updates von Siemens aufgenommen

5. 2026-08-24 #2

   PoC für CVE-2026-18963 aufgenommen

6. 2026-08-18 #1

   Initiale Fassung

References

• Keycloak 26.7.2 release vom 2026-08-18
  https://www.keycloak.org/2026/08/keycloak-2672-released
• Red Hat Security Advisory RHSA-2026:56524 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:56524
• Red Hat Security Advisory RHSA-2026:56523 vom 2026-08-19
  https://access.redhat.com/errata/RHSA-2026:56523
• Red Hat Security Advisory RHSA-2026:56520 vom 2026-08-18
  https://access.redhat.com/errata/RHSA-2026:56520
• Red Hat Security Advisory RHSA-2026:56519 vom 2026-08-19
  https://access.redhat.com/errata/RHSA-2026:56519
• PoC CVE-2026-18963 vom 2026-08-24
  https://github.com/Red-Darkin/CVE-2026-18963-keycloak
• Siemens Security Advisory SSA-503852 vom 2026-09-08
  https://cert-portal.siemens.com/productcert/html/ssa-503852.html
• Keycloak 26.8.0 released vom 2026-10-01
  https://www.keycloak.org/2026/10/keycloak-2680-released
• IBM Security Bulletin 7296252 vom 2026-11-11
  https://www.ibm.com/support/pages/node/7296252
• Red Hat Security Advisory RHSA-2026:99764 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99764
• Red Hat Security Advisory RHSA-2026:99767 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99767
• Red Hat Security Advisory RHSA-2026:99765 vom 2026-11-13
  https://access.redhat.com/errata/RHSA-2026:99765
• Red Hat Security Advisory RHSA-2026:99763 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99763
• Red Hat Security Advisory RHSA-2026:99766 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99766