https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:54:45 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09476 bdu:2025-09476 https://cve.radiocsirt.org/vuln/bdu:2025-09476 https://cve.radiocsirt.org/vuln/euvd-2026-361705 EUVD-2026-361705 https://cve.radiocsirt.org/vuln/euvd-2026-361705 https://cve.radiocsirt.org/vuln/fkie_cve-2025-8419 <p>A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw&#39;s only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.</p> <p>A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw&#39;s only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-8419 https://cve.radiocsirt.org/vuln/ghsa-m4j5-5x4r-2xp9 <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw&#39;s only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-services</p> <p>Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw&#39;s only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-m4j5-5x4r-2xp9 https://cve.radiocsirt.org/vuln/rhsa-2025:15336 <p>org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability org.keycloak/keycloak-model-storage-service: Variable injection into environment variables</p> <p>org.keycloak/keycloak-services: Keycloak SMTP Inject Vulnerability org.keycloak/keycloak-model-storage-service: Variable injection into environment variables</p> https://cve.radiocsirt.org/vuln/rhsa-2025:15336 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1739 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1739