https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T10:40:15.493695+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349546 EUVD-2026-349546 2026-10-10T10:40:15.496242+00:00 EUVD-2026-349546 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10973 fkie_cve-2024-10973 2026-10-10T10:40:15.496277+00:00

A vulnerability was found in Keycloak. The environment option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the JGroups replication configuration is always used in plain text which can allow an attacker that has access to adjacent networks related to JGroups to read sensitive information.

 https://cve.radiocsirt.org/vuln/ghsa-g6qq-c9f9-2772 GHSA-g6qq-c9f9-2772 — Keycloak on Quarkus CLI option for encrypted JGroups ignored 2026-10-10T10:40:15.496309+00:00

Affected: Maven: org.keycloak:keycloak-quarkus-server

The env option `KC_CACHE_EMBEDDED_MTLS_ENABLED` does not work and the jgroups replication configuration is always used in plain. This option worked before in 24 and 22. More info in public issue https://github.com/keycloak/keycloak/issues/34644.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3719 WID-SEC-W-2024-3719 — Keycloak: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-10T10:40:15.496334+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Keycloak ausnutzen, um Informationen offenzulegen.