https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:34:09.871524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0090 certfr-2024-avi-0090 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T09:34:09.878731+00:00 certfr-2024-avi-0090 https://cve.radiocsirt.org/vuln/euvd-2026-227926 EUVD-2026-227926 2026-10-03T09:34:09.878768+00:00 EUVD-2026-227926 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0105 fkie_cve-2023-0105 2026-10-03T09:34:09.878783+00:00

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them.

 https://cve.radiocsirt.org/vuln/ghsa-c7xw-p58w-h6fj GHSA-c7xw-p58w-h6fj — Keycloak: Impersonation and lockout possible through incorrect handling of email trust 2026-10-03T09:34:09.878810+00:00

Affected: Maven: org.keycloak:keycloak-core

Impersonation and lockout are possible due to email trust not being handled correctly in Keycloak. Since the verified state is not reset when the email changes, it is possible for users to shadow others with the same email and lock out or impersonate them.

 https://cve.radiocsirt.org/vuln/gsd-2023-0105 gsd-2023-0105 2026-10-03T09:34:09.878832+00:00 gsd-2023-0105 https://cve.radiocsirt.org/vuln/rhsa-2023:7482 RHSA-2023:7482 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.6 security update on RHEL 7 2026-10-03T09:34:09.878843+00:00

keycloak: impersonation and lockout possible through incorrect handling of email trust bouncycastle: potential blind LDAP injection attack using a self-signed certificate HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0036 WID-SEC-W-2023-0036 — Keycloak: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T09:34:09.878862+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen und dadurch Nutzerrechte zu erlangen.