Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

Red Hat build of Keycloak 26.6.8 güvenlik açıkları

Red Hat

Red Hat build of Keycloak 26.6.8 için bildirim al RSS

Toplam açık
24
Kritik
0
Aktif istismar
0
Yaması çıkan
0
Son açık
9 sa önce
Önem dağılımı
  • Kritik 0
  • Yüksek 14
  • Orta 10
  • Düşük 0

Son açıklar

10 açık

  1. 6,5Orta CVE-2026-97848 Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-209 sa önce
  2. 6,4Orta CVE-2026-97367 Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-2879 sa önce
  3. 6,5Orta CVE-2026-96547 Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-8629 sa önce
  4. 5,4Orta CVE-2026-96460 Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2 Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-3039 sa önce
  5. 4,9Orta CVE-2026-92856 Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-8629 sa önce
  6. 6,8Orta CVE-2026-19688 Keycloak-services: keycloak-services: admin api missing audience check Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-2879 sa önce
  7. 4,2Orta CVE-2026-96447 Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-2879 sa önce
  8. 6,8Orta CVE-2026-109081 Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-8629 sa önce
  9. 6,4Orta CVE-2026-107124 Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-3849 sa önce
  10. 6,8Orta CVE-2026-97174 Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens Red Hat Single Sign-On 7Red Hat build of Keycloak 26.6.8CWE-2021 sa önce