https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:45:34.054210+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-44528 cnvd-2019-44528 2026-10-02T23:45:34.060264+00:00 cnvd-2019-44528 https://cve.radiocsirt.org/vuln/euvd-2026-53456 EUVD-2026-53456 2026-10-02T23:45:34.060296+00:00 EUVD-2026-53456 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10199 fkie_cve-2019-10199 2026-10-02T23:45:34.060310+00:00

It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain.

 https://cve.radiocsirt.org/vuln/ghsa-p5xp-6vpf-jwvh GHSA-p5xp-6vpf-jwvh — Improper Input Validation and Cross-Site Request Forgery in Keycloak 2026-10-02T23:45:34.060338+00:00

Affected: Maven: org.keycloak:keycloak-core

It was found that Keycloak's account console, up to 6.0.1, did not perform adequate header checks in some requests. An attacker could use this flaw to trick an authenticated user into performing operations via request from an untrusted domain.

 https://cve.radiocsirt.org/vuln/gsd-2019-10199 gsd-2019-10199 2026-10-02T23:45:34.060361+00:00 gsd-2019-10199 https://cve.radiocsirt.org/vuln/rhsa-2019:2483 RHSA-2019:2483 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.3 security update 2026-10-02T23:45:34.060372+00:00

keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation