https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:38:18.499336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-08727 cnvd-2022-08727 2026-10-03T09:38:18.659849+00:00 cnvd-2022-08727 https://cve.radiocsirt.org/vuln/euvd-2026-21305 EUVD-2026-21305 2026-10-03T09:38:18.659889+00:00 EUVD-2026-21305 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4133 fkie_cve-2021-4133 2026-10-03T09:38:18.659904+00:00

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.

 https://cve.radiocsirt.org/vuln/ghsa-83x4-9cwr-5487 GHSA-83x4-9cwr-5487 — Improper Authorization in Keycloak 2026-10-03T09:38:18.659933+00:00

Affected: Maven: org.keycloak:keycloak-services

A incorrect authorization flaw was found in Keycloak 12.0.0, the flaw allows an attacker with any existing user account to create new default user accounts via the administrative REST API even where new user registration is disabled.

 https://cve.radiocsirt.org/vuln/gsd-2021-4133 gsd-2021-4133 2026-10-03T09:38:18.659956+00:00 gsd-2021-4133 https://cve.radiocsirt.org/vuln/rhsa-2021:5217 RHSA-2021:5217 — Red Hat Security Advisory: Red Hat Single Sign-On 7.5.0 security update 2026-10-03T09:38:18.659968+00:00

Keycloak: Incorrect authorization allows unpriviledged users to create other users