CVE-2026-1609

Mô tả

Tham khảo

• access.redhat.com/security/cve/CVE-2026-1609 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• keycloak/keycloak · Issue Tracking
• keycloak/keycloak release 26.5.3 · Release Notes
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1609.json · Vendor Advisory

Lỗ hổng khác của build of keycloak

• CVE-2026-16442NGHIÊM TRỌNG 9.8A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue oc…
• CVE-2026-15572CAO 8.8A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, whi…
• CVE-2026-16102CAO 8.1A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR…
• CVE-2026-16100TRUNG BÌNH 6.5A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from faile…
• CVE-2026-16071TRUNG BÌNH 5.4A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue oc…