https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:47:07.639292+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-372732 EUVD-2026-372732 2026-10-13T03:47:07.644151+00:00 EUVD-2026-372732 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3501 fkie_cve-2025-3501 2026-10-13T03:47:07.644181+00:00

A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.

 https://cve.radiocsirt.org/vuln/ghsa-hw58-3793-42gg GHSA-hw58-3793-42gg — Keycloak hostname verification 2026-10-13T03:47:07.644209+00:00

Affected: Maven: org.keycloak:keycloak-services

A flaw was found in Keycloak. By setting a verification policy to 'ANY', the trust store certificate verification is skipped, which is unintended.

 https://cve.radiocsirt.org/vuln/rhsa-2025:4335 RHSA-2025:4335 — Red Hat Security Advisory: Red Hat build of Keycloak 26.0.11 Images Update 2026-10-13T03:47:07.644232+00:00

org.keycloak/keycloak-services: JWT Token Cache Exhaustion Leading to Denial of Service (DoS) in Keycloak org.keycloak.protocol.services: Keycloak hostname verification org.keycloak.authentication: Two factor authentication bypass

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0908 WID-SEC-W-2025-0908 — Keycloack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-13T03:47:07.644252+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Keycloack ausnutzen, um Sicherheitsvorkehrungen zu umgehen.