https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:24:49.329539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-33503 cnvd-2020-33503 2026-10-03T17:24:49.427337+00:00 cnvd-2020-33503 https://cve.radiocsirt.org/vuln/euvd-2026-35629 EUVD-2026-35629 2026-10-03T17:24:49.427373+00:00 EUVD-2026-35629 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1758 fkie_cve-2020-1758 2026-10-03T17:24:49.427388+00:00

A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.

 https://cve.radiocsirt.org/vuln/ghsa-c597-f74m-jgc2 GHSA-c597-f74m-jgc2 — Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak 2026-10-03T17:24:49.427417+00:00

Affected: Maven: org.keycloak:keycloak-parent

A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.

 https://cve.radiocsirt.org/vuln/gsd-2020-1758 gsd-2020-1758 2026-10-03T17:24:49.427440+00:00 gsd-2020-1758 https://cve.radiocsirt.org/vuln/rhsa-2020:2106 RHSA-2020:2106 — Red Hat Security Advisory: Red Hat Single Sign-On 7.3.8 security update on RHEL 6 2026-10-03T17:24:49.427452+00:00

keycloak: security issue on reset credential flow keycloak: problem with privacy after user logout keycloak: improper verification of certificate with host mismatch could result in information disclosure