https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:19:38 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-ba48144 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: keycloak</p> <p>Package keycloak version 26.5.7-r5 fixes 11 vulnerabilities: CVE-2026-54291, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: keycloak</p> <p>Package keycloak version 26.5.7-r5 fixes 11 vulnerabilities: CVE-2026-54291, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ba48144 https://cve.radiocsirt.org/vuln/euvd-2026-363697 EUVD-2026-363697 https://cve.radiocsirt.org/vuln/euvd-2026-363697 https://cve.radiocsirt.org/vuln/fkie_cve-2025-11537 <p>A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined &#39;long&#39; pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.</p> <p>A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined &#39;long&#39; pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-11537 https://cve.radiocsirt.org/vuln/ghsa-gv3v-2cpp-3pmq <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-server</p> <p>A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined &#39;long&#39; pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.</p> <p>Patches are available, see:</p> <p>- https://github.com/keycloak/keycloak/releases/tag/26.4.11 - https://github.com/keycloak/keycloak/releases/tag/26.5.6 - https://github.com/keycloak/keycloak/releases/tag/26.6.0</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-quarkus-server</p> <p>A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined &#39;long&#39; pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract these credentials (e.g., bearer tokens, session cookies) and use them to impersonate users, leading to a full account compromise.</p> <p>Patches are available, see:</p> <p>- https://github.com/keycloak/keycloak/releases/tag/26.4.11 - https://github.com/keycloak/keycloak/releases/tag/26.5.6 - https://github.com/keycloak/keycloak/releases/tag/26.6.0</p> https://cve.radiocsirt.org/vuln/ghsa-gv3v-2cpp-3pmq https://cve.radiocsirt.org/vuln/jvndb-2026-026852 <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-2026-3911, CVE-2026-4282, CVE-2026-4325, CVE-2026-4634, CVE-2026-22745, CVE-2026-22748, CVE-2026-25854, CVE-2026-40972, CVE-2026-40975</p> <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-2026-3911, CVE-2026-4282, CVE-2026-4325, CVE-2026-4634, CVE-2026-22745, CVE-2026-22748, CVE-2026-25854, CVE-2026-40972, CVE-2026-40975</p> https://cve.radiocsirt.org/vuln/jvndb-2026-026852 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0394 <p>Ein lokaler, oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler, oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0394