https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:58:26.509839+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-45282 cnvd-2021-45282 2026-10-04T20:58:26.618199+00:00 cnvd-2021-45282 https://cve.radiocsirt.org/vuln/euvd-2026-42405 EUVD-2026-42405 2026-10-04T20:58:26.618238+00:00 EUVD-2026-42405 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14389 fkie_cve-2020-14389 2026-10-04T20:58:26.618252+00:00

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.

 https://cve.radiocsirt.org/vuln/ghsa-c9x9-xv66-xp3v GHSA-c9x9-xv66-xp3v — Improper privilege management in Keycloak 2026-10-04T20:58:26.618282+00:00

Affected: Maven: org.keycloak:keycloak-core

A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission.

 https://cve.radiocsirt.org/vuln/gsd-2020-14389 gsd-2020-14389 2026-10-04T20:58:26.618306+00:00 gsd-2020-14389 https://cve.radiocsirt.org/vuln/rhsa-2020:4929 RHSA-2020:4929 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.3 security update on RHEL 6 2026-10-04T20:58:26.618317+00:00

keycloak: OIDC redirect_uri allows dangerous schemes resulting in potential XSS keycloak: user can manage resources with just "view-profile" role using new Account Console