https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:41:03.651450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-01582 bdu:2024-01582 2026-10-03T07:41:03.728292+00:00 bdu:2024-01582 https://cve.radiocsirt.org/vuln/euvd-2026-261617 EUVD-2026-261617 2026-10-03T07:41:03.728328+00:00 EUVD-2026-261617 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1722 fkie_cve-2024-1722 2026-10-03T07:41:03.728343+00:00

A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.

 https://cve.radiocsirt.org/vuln/ghsa-cq42-vhv7-xr7p GHSA-cq42-vhv7-xr7p — Keycloak Denial of Service via account lockout 2026-10-03T07:41:03.728372+00:00

Affected: Maven: org.keycloak:keycloak-services

In any realm set with "User (Self) registration" a user that is registered with a username in email format can be "locked out" (denied from logging in) using his username.

 https://cve.radiocsirt.org/vuln/gsd-2024-1722 gsd-2024-1722 2026-10-03T07:41:03.728396+00:00 gsd-2024-1722 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0464 WID-SEC-W-2024-0464 — Keycloak: Schwachstelle ermöglicht Denial of Service 2026-10-03T07:41:03.728408+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen.