Skip to content
Threat Feed
Subscribe

Product

Red Hat Build of Keycloak

3 briefs RSS
high advisory

Credential Guessing Vulnerability via WildFly Elytron Unicode Normalization

A vulnerability in WildFly Elytron's password normalization logic allows attackers to bypass intended password character entropy, facilitating unauthorized access through dictionary-based credential guessing.

Red Hat build of Apache Camel 4 for Quarkus 3 +5 credential-access vulnerability middleware
1t 1c
critical advisory

Critical Authentication Bypass in Red Hat Build of Keycloak

A critical vulnerability (CVE-2026-18963) in the keycloak-services component allows unauthenticated attackers to hijack user accounts by bypassing password reset verification requirements.

PoC Red Hat Build of Keycloak +1 authentication-bypass identity-management cve-2026-18963
1t 1c updated
high advisory

CVE-2026-16443: Signature Validation Bypass in Keycloak SAML Metadata Import

An authentication bypass vulnerability in Red Hat Build of Keycloak allows unauthenticated attackers to forge SAML assertions by manipulating metadata import settings to disable signature validation.

Red Hat Build of Keycloak authentication-bypass saml identity-management
2t 1c