https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:20:34.660773+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-201584 EUVD-2026-201584 2026-10-03T16:20:34.774741+00:00 EUVD-2026-201584 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2232 fkie_cve-2022-2232 2026-10-03T16:20:34.774782+00:00

A flaw was found in the Keycloak package. This flaw allows an attacker to utilize an LDAP injection to bypass the username lookup or potentially perform other malicious actions.

 https://cve.radiocsirt.org/vuln/ghsa-8hc5-rmgf-qx6p GHSA-8hc5-rmgf-qx6p — Keycloak vulnerable to LDAP Injection on UsernameForm Login 2026-10-03T16:20:34.774816+00:00

Affected: Maven: org.keycloak:keycloak-ldap-federation, Maven: org.keycloak:keycloak-services

A flaw was found in the Keycloak package. This flaw allows an attacker to benefit from an LDAP query and access existing usernames in the server.

 https://cve.radiocsirt.org/vuln/gsd-2022-2232 gsd-2022-2232 2026-10-03T16:20:34.774842+00:00 gsd-2022-2232 https://cve.radiocsirt.org/vuln/rhsa-2024:0094 RHSA-2024:0094 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7 2026-10-03T16:20:34.774855+00:00

keycloak: LDAP injection on username input keycloak: open redirect via "form_post.jwt" JARM response mode

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3028 WID-SEC-W-2023-3028 — Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T16:20:34.774876+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Informationen offenzulegen.