https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:50:53.233869+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274698 EUVD-2026-274698 2026-10-02T20:50:53.254851+00:00 EUVD-2026-274698 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1190 fkie_cve-2026-1190 2026-10-02T20:50:53.254885+00:00

A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language (SAML) setup, it fails to validate the `NotOnOrAfter` timestamp within the `SubjectConfirmationData`. This allows an attacker to delay the expiration of SAML responses, potentially extending the time a response is considered valid and leading to unexpected session durations or resource consumption.

 https://cve.radiocsirt.org/vuln/ghsa-63v5-26vq-m4vm GHSA-63v5-26vq-m4vm — Keycloak's missing timestamp validation allows attackers to extend SAML response validity periods 2026-10-02T20:50:53.254918+00:00

Affected: Maven: org.keycloak:keycloak-services

A flaw was found in Keycloak's SAML brokering functionality. When Keycloak is configured as a client in a Security Assertion Markup Language (SAML) setup, it fails to validate the `NotOnOrAfter` timestamp within the `SubjectConfirmationData`. This allows an attacker to delay the expiration of SAML responses, potentially extending the time a response is considered valid and leading to unexpected session durations or resource consumption.

 https://cve.radiocsirt.org/vuln/jvndb-2026-010299 jvndb-2026-010299 2026-10-02T20:50:53.254944+00:00

Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.

 https://cve.radiocsirt.org/vuln/rhsa-2026:3947 RHSA-2026:3947 — Red Hat Security Advisory: Red Hat build of Keycloak 26.4.10 Update 2026-10-02T20:50:53.254962+00:00

keycloak: Keycloak Authorization Header Parsing Leading to Potential Security Control Bypass org.keycloak/keycloak-services: Keycloak SAML brokering: Response delay due to unchecked NotOnOrAfter in SubjectConfirmationData keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions keycloak: Keycloak: Denial of Service due to excessive SAMLRequest decompression keycloak: Keycloak: Unauthorized authentication via disabled SAML Identity Provider org.keycloak/keycloak-services: Keycloak: Missing Check on Disabled Client for Docker Registry Protocol org.keycloak/keycloak-services: Improper Enforcement of Disabled Identity Provider in IdentityBrokerService (Authentication Bypass) org.keycloak.broker.saml: Keycloak SAML broker: Authentication bypass due to disabled SAML client completing IdP-initiated login

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0147 WID-SEC-W-2026-0147 — Keycloak (SAML brokering): Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T20:50:53.254987+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Dateien zu manipulieren, was zu einer Umgehung der Authentifizierung oder einem Denial-of-Service führen kann.