Vulnerabilities

TI-2026-04038 CVE-2026-4636 · GHSA-f2hx-5fx3-hmcv

Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.

LOW 38

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00436 Published 2026-04-02 Fixed in 26.2.15-1, 26.2-18 +3 CWE-551

TI-2026-04036 CVE-2026-4634 · GHSA-h4wv-g838-66g3

MEDIUM 40

A flaw was found in Keycloak.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00638 Published 2026-04-02 Fixed in 26.2.15-1, 26.2-18 +7 CWE-1050

TI-2026-03764 CVE-2026-4325 · GHSA-rx66-hj7g-28h7

LOW 24

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.00255 Published 2026-04-02 Fixed in 26.2.15-1, 26.2-18 +3 CWE-653

TI-2026-03727 CVE-2026-4282 · GHSA-hj93-h7pg-fh6v

LOW 35

A flaw was found in Keycloak.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00432 Published 2026-04-02 Fixed in 26.2.15-1, 26.2-18 +3 CWE-653

TI-2026-03352 CVE-2026-3872 · GHSA-cjm2-j6cm-6p6m

LOW 34

A flaw was found in Keycloak.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00448 Published 2026-04-02 Fixed in 26.2.15-1, 26.2-18 +3 CWE-601