https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:58:48.853624+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-264207 EUVD-2026-264207 2026-10-03T11:58:48.962595+00:00 EUVD-2026-264207 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10044 fkie_cve-2025-10044 2026-10-03T11:58:48.962645+00:00

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors.

 https://cve.radiocsirt.org/vuln/ghsa-27gc-wj6x-9w55 GHSA-27gc-wj6x-9w55 — Keycloak error_description injection on error pages that can trigger phishing attacks 2026-10-03T11:58:48.962743+00:00

Affected: Maven: org.keycloak:keycloak-account-ui, Maven: org.keycloak:keycloak-admin-ui

Keycloak’s account console accepts arbitrary text in the `error_description` query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an attacker can craft URLs with misleading messages (e.g., fake support phone numbers or URLs), which are displayed within the trusted Keycloak UI. This creates a phishing vector, potentially tricking users into contacting malicious actors.

 https://cve.radiocsirt.org/vuln/jvndb-2026-010299 jvndb-2026-010299 2026-10-03T11:58:48.962797+00:00

Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.

 https://cve.radiocsirt.org/vuln/rhsa-2025:16399 RHSA-2025:16399 — Red Hat Security Advisory: Red Hat build of Keycloak 26.2.9 Security Update 2026-10-03T11:58:48.962829+00:00

org.keycloak/keycloak-model-storage-service: Variable injection into environment variables keycloak: Keycloak error_description injection on error pages

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1987 WID-SEC-W-2025-1987 — Keycloak: Mehrere Schwachstellen 2026-10-03T11:58:48.962863+00:00

Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Informationen offenzulegen, und um falsche Informationen darzustellen.