https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T09:41:10.285738+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278466 EUVD-2026-278466 2026-10-08T09:41:10.288673+00:00 EUVD-2026-278466 https://cve.radiocsirt.org/vuln/fkie_cve-2026-4633 fkie_cve-2026-4633 2026-10-08T09:41:10.288706+00:00

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.

 https://cve.radiocsirt.org/vuln/ghsa-rhgq-f8x5-j2jc GHSA-rhgq-f8x5-j2jc — Keycloak's identity-first login flow exposes user information 2026-10-08T09:41:10.288737+00:00

Affected: Maven: org.keycloak:keycloak-services

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0821 WID-SEC-W-2026-0821 — Keycloak: Mehrere Schwachstellen 2026-10-08T09:41:10.288762+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.