https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:16:28.053800+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13881 CVE-2025-13881 — Org.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin… 2026-10-04T14:16:28.099767+00:00

Affected: Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.9

A flaw was found in Keycloak Admin API. This vulnerability allows an administrator with limited privileges to retrieve sensitive custom attributes via the /unmanagedAttributes endpoint, bypassing User Profile visibility settings.