https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:36:54.914167+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14559 CVE-2025-14559 — Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for… 2026-10-07T21:36:54.929950+00:00

Affected: Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.9

A flaw was found in the keycloak-services component of Keycloak. This vulnerability allows the issuance of access and refresh tokens for disabled users, leading to unauthorized use of previously revoked privileges, via a business logic vulnerability in the Token Exchange implementation when a privileged client invokes the token exchange flow.