https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T04:58:48.166667+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-20900 EUVD-2026-20900 2026-10-09T04:58:48.189435+00:00 EUVD-2026-20900 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3513 fkie_cve-2021-3513 2026-10-09T04:58:48.189470+00:00

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/ghsa-xv7h-95r7-595j GHSA-xv7h-95r7-595j — Incorrect implementation of lockout feature in Keycloak 2026-10-09T04:58:48.189500+00:00

Affected: Maven: org.keycloak:keycloak-parent

A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error message displayed when wrong credentials are entered. The highest threat from this vulnerability is to confidentiality.

 https://cve.radiocsirt.org/vuln/gsd-2021-3513 gsd-2021-3513 2026-10-09T04:58:48.189523+00:00 gsd-2021-3513 https://cve.radiocsirt.org/vuln/rhsa-2021:3527 RHSA-2021:3527 — Red Hat Security Advisory: Red Hat Single Sign-On 7.4.9 security update on RHEL 6 2026-10-09T04:58:48.189535+00:00

jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception keycloak: X509 Direct Grant Auth does not verify certificate timestamp validity keycloak: Brute force attack is possible even after the account lockout keycloak: Anyone can register a new device when there is no device registered for passwordless login keycloak-model-infinispan: authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly could lead to a DoS attack