https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:06:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-292137 EUVD-2026-292137 https://cve.radiocsirt.org/vuln/euvd-2026-292137 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11419 <p>A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.</p> <p>A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11419 https://cve.radiocsirt.org/vuln/ghsa-q8hq-4h99-fj7x <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-dist</p> <p>Keycloak is vulnerable to a Denial of Service (DoS) attack due to the default JDK setting that permits Client-Initiated Renegotiation in TLS 1.2. An unauthenticated remote attacker can repeatedly initiate TLS renegotiation requests to exhaust server CPU resources, making the service unavailable. Immediate mitigation is available by setting the `-Djdk.tls.rejectClientInitiatedRenegotiation=true` Java system property in the Keycloak startup configuration.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-dist</p> <p>Keycloak is vulnerable to a Denial of Service (DoS) attack due to the default JDK setting that permits Client-Initiated Renegotiation in TLS 1.2. An unauthenticated remote attacker can repeatedly initiate TLS renegotiation requests to exhaust server CPU resources, making the service unavailable. Immediate mitigation is available by setting the `-Djdk.tls.rejectClientInitiatedRenegotiation=true` Java system property in the Keycloak startup configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-q8hq-4h99-fj7x https://cve.radiocsirt.org/vuln/rhsa-2025:18254 <p>keycloak: Keycloak TLS Client-Initiated Renegotiation Denial of Service</p> <p>keycloak: Keycloak TLS Client-Initiated Renegotiation Denial of Service</p> https://cve.radiocsirt.org/vuln/rhsa-2025:18254 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2224 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2224