Skip to content
Threat Feed

Tag

Cve-2026-4634

1 brief RSS
high advisory

Keycloak Denial-of-Service Vulnerability via Excessive Scope Parameter (CVE-2026-4634)

An unauthenticated attacker can cause a denial-of-service on Keycloak servers by sending a crafted POST request to the OIDC token endpoint with an excessively long scope parameter, leading to high resource consumption.

cve-2026-4634 denial-of-service keycloak
2r 1t 1c