Skip to content
OpenAdvisories

Vendor

defenseunicorns

2 known vulnerabilities.

Products

uds-identity-config 1 pepr 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-46389

    UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`

    UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS Core's Identity deployment. In versions 0.11.0 through 0.26.0, a logic error in the `client-kubernetes-secret` Keycloak client authenticator …

    defenseunicorns uds-identity-config