https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:58:37.880483+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-00373 cnvd-2019-00373 2026-10-03T07:58:37.945491+00:00 cnvd-2019-00373 https://cve.radiocsirt.org/vuln/euvd-2026-67135 EUVD-2026-67135 2026-10-03T07:58:37.945539+00:00 EUVD-2026-67135 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14637 fkie_cve-2018-14637 2026-10-03T07:58:37.945554+00:00

The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.

 https://cve.radiocsirt.org/vuln/ghsa-gf2j-7qwg-4f5x GHSA-gf2j-7qwg-4f5x — Improper Authentication in Keycloak 2026-10-03T07:58:37.945584+00:00

Affected: Maven: org.keycloak:keycloak-core

The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.

 https://cve.radiocsirt.org/vuln/gsd-2018-14637 gsd-2018-14637 2026-10-03T07:58:37.945605+00:00 gsd-2018-14637 https://cve.radiocsirt.org/vuln/rhsa-2018:3592 RHSA-2018:3592 — Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 on RHEL 6 security and bug fix update 2026-10-03T07:58:37.945617+00:00

keycloak: auth permitted with expired certs in SAML client keycloak: expiration not validated in SAML broker consumer endpoint keycloak: XSS-Vulnerability with response_mode=form_post keycloak: brute force protection not working for the entire login workflow keycloak: Open Redirect in Login and Logout