https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:47:13.440443+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ba48144 Withdrawn: CLEANSTART-2026-BA48144 — Security fixes in keycloak 26.5.7-r5 2026-10-03T13:47:13.523481+00:00

Withdrawn by the publisher.

Affected: CleanStart: keycloak

Package keycloak version 26.5.7-r5 fixes 11 vulnerabilities: CVE-2026-54291, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515...

 https://cve.radiocsirt.org/vuln/euvd-2026-363697 EUVD-2026-363697 2026-10-03T13:47:13.523542+00:00 EUVD-2026-363697 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11537 fkie_cve-2025-11537 2026-10-03T13:47:13.523559+00:00

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.

 https://cve.radiocsirt.org/vuln/ghsa-gv3v-2cpp-3pmq GHSA-gv3v-2cpp-3pmq — Keycloak logs sensitive headers 2026-10-03T13:47:13.523589+00:00

Affected: Maven: org.keycloak:keycloak-quarkus-server

A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.

Patches are available, see:

- https://github.com/keycloak/keycloak/releases/tag/26.4.11 - https://github.com/keycloak/keycloak/releases/tag/26.5.6 - https://github.com/keycloak/keycloak/releases/tag/26.6.0

 https://cve.radiocsirt.org/vuln/jvndb-2026-026852 jvndb-2026-026852 2026-10-03T13:47:13.523617+00:00

Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-2026-3911, CVE-2026-4282, CVE-2026-4325, CVE-2026-4634, CVE-2026-22745, CVE-2026-22748, CVE-2026-25854, CVE-2026-40972, CVE-2026-40975

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0394 WID-SEC-W-2026-0394 — Keycloak: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen 2026-10-03T13:47:13.523638+00:00

Ein lokaler, oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Informationen offenzulegen.