https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:34:23.619676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-67163 EUVD-2026-67163 2026-10-03T07:34:23.715262+00:00 EUVD-2026-67163 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14658 fkie_cve-2018-14658 2026-10-03T07:34:23.715302+00:00

A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in org.keycloak.protocol.oidc.utils.RedirectUtils before the redirect url is verified. This can lead to an Open Redirection attack

 https://cve.radiocsirt.org/vuln/ghsa-3qh2-mccc-q5m6 GHSA-3qh2-mccc-q5m6 — Keycloak Open Redirect 2026-10-03T07:34:23.715337+00:00

Affected: Maven: org.keycloak:keycloak-core

A flaw was found in JBOSS Keycloak 3.2.1.Final. The Redirect URL for both Login and Logout are not normalized in `org.keycloak.protocol.oidc.utils.RedirectUtils` before the redirect url is verified. This can lead to an Open Redirection attack

 https://cve.radiocsirt.org/vuln/gsd-2018-14658 gsd-2018-14658 2026-10-03T07:34:23.715362+00:00 gsd-2018-14658 https://cve.radiocsirt.org/vuln/rhsa-2018:3592 RHSA-2018:3592 — Red Hat Security Advisory: Red Hat Single Sign-On 7.2.5 on RHEL 6 security and bug fix update 2026-10-03T07:34:23.715375+00:00

keycloak: auth permitted with expired certs in SAML client keycloak: expiration not validated in SAML broker consumer endpoint keycloak: XSS-Vulnerability with response_mode=form_post keycloak: brute force protection not working for the entire login workflow keycloak: Open Redirect in Login and Logout