https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:50:59.526767+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-49780 EUVD-2026-49780 2026-10-03T11:50:59.663016+00:00 EUVD-2026-49780 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3868 fkie_cve-2019-3868 2026-10-03T11:50:59.663056+00:00

Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.

 https://cve.radiocsirt.org/vuln/ghsa-gc52-xj6p-9pxp GHSA-gc52-xj6p-9pxp — Exposure of Sensitive Information to an Unauthorized Actor in Keycloak 2026-10-03T11:50:59.663090+00:00

Affected: Maven: org.keycloak:keycloak-core

Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user?s browser session.

 https://cve.radiocsirt.org/vuln/gsd-2019-3868 gsd-2019-3868 2026-10-03T11:50:59.663114+00:00 gsd-2019-3868 https://cve.radiocsirt.org/vuln/rhsa-2019:0856 RHSA-2019:0856 — Red Hat Security Advisory: Red Hat Single Sign-On 7.2.7 security update on RHEL 7 2026-10-03T11:50:59.663126+00:00

keycloak: session hijack using the user access token