https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:26:14.498685+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03467 bdu:2023-03467 2026-10-02T17:26:14.505854+00:00 bdu:2023-03467 https://cve.radiocsirt.org/vuln/euvd-2026-200840 EUVD-2026-200840 2026-10-02T17:26:14.505885+00:00 EUVD-2026-200840 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4361 fkie_cve-2022-4361 2026-10-02T17:26:14.505898+00:00

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL value or the redirect_uri.

 https://cve.radiocsirt.org/vuln/ghsa-3p62-6fjh-3p5h GHSA-3p62-6fjh-3p5h — Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC 2026-10-02T17:26:14.505925+00:00

Affected: Maven: org.keycloak:keycloak-services

AssertionConsumerServiceURL is a Java implementation for SAML Service Providers (org.keycloak.protocol.saml). Affected versions of this package are vulnerable to Cross-site Scripting (XSS).

AssertionConsumerServiceURL allows XSS when sending a crafted SAML XML request.

 https://cve.radiocsirt.org/vuln/gsd-2022-4361 gsd-2022-4361 2026-10-02T17:26:14.505949+00:00 gsd-2022-4361 https://cve.radiocsirt.org/vuln/rhsa-2023:3883 RHSA-2023:3883 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 security update on RHEL 7 2026-10-02T17:26:14.505960+00:00

RHSSO: XSS due to lax URI scheme validation Undertow: Infinite loop in SslConduit during close keycloak: Untrusted Certificate Validation keycloak: oauth client impersonation keycloak: client access via device auth request spoof

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1584 WID-SEC-W-2023-1584 — Red Hat Single Sign On: Mehrere Schwachstellen 2026-10-02T17:26:14.505980+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um einen Cross-Site Scripting oder Denial of Service Angriff durchzuführen.