Skip to content
OpenAdvisories
Medium WID-SEC-2026-3558 4 CVEs

Keycloak: Mehrere Schwachstellen

Published Sep 23, 2026 · Updated Nov 8, 2026 · Revision 3 · de

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um seine Privilegien zu erhöhen.

Product

Keycloak ermöglicht Single Sign-On mit Identity and Access Management für moderne Anwendungen und Dienste.

Vulnerabilities 4

  • Medium 6.8
    CVE-2026-96445

    Keycloak-services: keycloak-services: conditional otp skip-header policy evaluated against untrusted proxy headers

    A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates specific HTTP headers to determine if a one-time password (OTP) should be skipped, but fails to verify if…

    Red Hat Red Hat Single Sign-On 7 Red Hat build of Keycloak 26.6.8
  • Medium 6.6
    CVE-2026-97177

    Keycloak-services: keycloak-services: generic user update bypasses denied reset-password permission

    A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific password reset authorizations during a general user profile update. This allows a delegated a…

    Red Hat Red Hat Single Sign-On 7 Red Hat build of Keycloak 26.6.8
  • Medium 4.2
    CVE-2026-96446

    Keycloak-services: keycloak-services: par single-use bypass via prompt=none silent authentication path

    A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to …

    Red Hat Red Hat Single Sign-On 7 Red Hat build of Keycloak 26.6.8
  • Medium 4.2
    CVE-2026-97176

    Keycloak-services: keycloak-services: essential acr requirement silently bypassed via cookie authenticator

    A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower…

    Red Hat Red Hat Single Sign-On 7 Red Hat Build of Keycloak

Revision history

  1. #3

    Neue Updates von Red Hat aufgenommen

  2. #2

    Neue Updates von Red Hat aufgenommen

  3. #1

    Initiale Fassung

References