https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T23:27:41.045951+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-keycloak-2025-3910 BIT-keycloak-2025-3910 — Org.keycloak.authentication: two factor authentication bypass 2026-10-12T23:27:41.050211+00:00

Affected: Bitnami: keycloak

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

 https://cve.radiocsirt.org/vuln/euvd-2026-372739 EUVD-2026-372739 2026-10-12T23:27:41.050255+00:00 EUVD-2026-372739 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3910 fkie_cve-2025-3910 2026-10-12T23:27:41.050272+00:00

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

 https://cve.radiocsirt.org/vuln/ghsa-5jfq-x6xp-7rw2 GHSA-5jfq-x6xp-7rw2 — Keycloak vulnerable to two factor authentication bypass 2026-10-12T23:27:41.050293+00:00

Affected: Maven: org.keycloak:keycloak-services

# Description A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions, allowing users to circumvent requirements such as setting up two-factor authentication.

 https://cve.radiocsirt.org/vuln/rhsa-2025:4335 RHSA-2025:4335 — Red Hat Security Advisory: Red Hat build of Keycloak 26.0.11 Images Update 2026-10-12T23:27:41.050313+00:00

org.keycloak/keycloak-services: JWT Token Cache Exhaustion Leading to Denial of Service (DoS) in Keycloak org.keycloak.protocol.services: Keycloak hostname verification org.keycloak.authentication: Two factor authentication bypass

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0908 WID-SEC-W-2025-0908 — Keycloack: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen 2026-10-12T23:27:41.050331+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Keycloack ausnutzen, um Sicherheitsvorkehrungen zu umgehen.