Skip to content
OpenAdvisories

Archive

5 October 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-105306 Public exploit

    Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registration

    A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker wi…