https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:58:54.735452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-46706 EUVD-2026-46706 2026-10-05T06:58:54.899286+00:00 EUVD-2026-46706 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27826 fkie_cve-2020-27826 2026-10-05T06:58:54.899344+00:00

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.

 https://cve.radiocsirt.org/vuln/ghsa-m9cj-v55f-8x26 GHSA-m9cj-v55f-8x26 — Authentication Bypass in keycloak 2026-10-05T06:58:54.899378+00:00

Affected: Maven: org.keycloak:keycloak-core

A flaw was found in Keycloak before version 12.0.0 where it is possible to update the user's metadata attributes using Account REST API. This flaw allows an attacker to change its own NameID attribute to impersonate the admin user for any particular application.

 https://cve.radiocsirt.org/vuln/gsd-2020-27826 gsd-2020-27826 2026-10-05T06:58:54.899404+00:00 gsd-2020-27826 https://cve.radiocsirt.org/vuln/rhsa-2020:5526 RHSA-2020:5526 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.4 security update on RHEL 6 2026-10-05T06:58:54.899418+00:00

keycloak: Account REST API can update user metadata attributes