https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:00:48.289913+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-03210 bdu:2019-03210 2026-10-03T04:00:48.296877+00:00 bdu:2019-03210 https://cve.radiocsirt.org/vuln/cnvd-2019-44529 cnvd-2019-44529 2026-10-03T04:00:48.296945+00:00 cnvd-2019-44529 https://cve.radiocsirt.org/vuln/euvd-2026-53455 EUVD-2026-53455 2026-10-03T04:00:48.296959+00:00 EUVD-2026-53455 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10201 fkie_cve-2019-10201 2026-10-03T04:00:48.296969+00:00

It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-4fgq-gq9g-3rw7 GHSA-4fgq-gq9g-3rw7 — Improper Verification of Cryptographic Signature in keycloak 2026-10-03T04:00:48.296997+00:00

Affected: Maven: org.keycloak:keycloak-core

It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and removes the <Signature> sections, the message is still accepted, and the message can be modified. An attacker could use this flaw to impersonate other users and gain access to sensitive information.

 https://cve.radiocsirt.org/vuln/gsd-2019-10201 gsd-2019-10201 2026-10-03T04:00:48.297020+00:00 gsd-2019-10201 https://cve.radiocsirt.org/vuln/rhsa-2019:2483 RHSA-2019:2483 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.3 security update 2026-10-03T04:00:48.297032+00:00

keycloak: CSRF check missing in My Resources functionality in the Account Console keycloak: SAML broker does not check existence of signature on document allowing any user impersonation