https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:07:33.933806+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-365342 EUVD-2026-365342 2026-10-03T09:07:33.980883+00:00 EUVD-2026-365342 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1249 fkie_cve-2024-1249 2026-10-03T09:07:33.980930+00:00

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.

 https://cve.radiocsirt.org/vuln/ghsa-m6q9-p373-g5q8 GHSA-m6q9-p373-g5q8 — Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS 2026-10-03T09:07:33.980963+00:00

Affected: Maven: org.keycloak:keycloak-services

A potential security flaw in the "checkLoginIframe" which allows unvalidated cross-origin messages, enabling potential DDoS attacks. By exploiting this vulnerability, attackers could coordinate to send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.

#### Acknowledgements Special thanks to Adriano Márcio Monteiro from BRZTEC for reporting this issue and helping us improve our project.

 https://cve.radiocsirt.org/vuln/gsd-2024-1249 gsd-2024-1249 2026-10-03T09:07:33.981006+00:00 gsd-2024-1249 https://cve.radiocsirt.org/vuln/rhsa-2024:1860 RHSA-2024:1860 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.8 enhancement and security update on RHEL 7 2026-10-03T09:07:33.981025+00:00

keycloak: Log Injection during WebAuthn authentication or registration keycloak: Authorization Bypass keycloak: path transversal in redirection validation keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkLoginIframe leads to DDoS undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0910 WID-SEC-W-2024-0910 — Red Hat Single Sign On: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-03T09:07:33.981051+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Single Sign On ausnutzen, um Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand auszulösen, DDoS-Angriffe durchzuführen, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.