https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:21:47.746817+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05658 bdu:2023-05658 2026-10-03T05:21:47.893423+00:00 bdu:2023-05658 https://cve.radiocsirt.org/vuln/euvd-2026-6935 EUVD-2026-6935 2026-10-03T05:21:47.893459+00:00 EUVD-2026-6935 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2422 fkie_cve-2023-2422 2026-10-03T05:21:47.893474+00:00

A flaw was found in Keycloak. A Keycloak server configured to support mTLS authentication for OAuth/OpenID clients does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client, therefore, access data that belongs to other clients.

 https://cve.radiocsirt.org/vuln/ghsa-3qh5-qqj2-c78f GHSA-3qh5-qqj2-c78f — Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients 2026-10-03T05:21:47.893504+00:00

Affected: Maven: org.keycloak:keycloak-services

When a Keycloak server is configured to support mTLS authentication for OAuth/OpenID clients, it does not properly verify the client certificate chain. A client that possesses a proper certificate can authorize itself as any other client and therefore access data that belongs to other clients.

 https://cve.radiocsirt.org/vuln/gsd-2023-2422 gsd-2023-2422 2026-10-03T05:21:47.893528+00:00 gsd-2023-2422 https://cve.radiocsirt.org/vuln/rhsa-2023:3883 RHSA-2023:3883 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.4 security update on RHEL 7 2026-10-03T05:21:47.893540+00:00

RHSSO: XSS due to lax URI scheme validation Undertow: Infinite loop in SslConduit during close keycloak: Untrusted Certificate Validation keycloak: oauth client impersonation keycloak: client access via device auth request spoof

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1573 WID-SEC-W-2023-1573 — Keycloak: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-03T05:21:47.893562+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Keycloak und Red Hat Single Sign On ausnutzen, um Sicherheitsvorkehrungen zu umgehen.