https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:11:56 +0000 https://cve.radiocsirt.org/vuln/bit-keycloak-2026-0871 <p><strong>Affected:</strong> Bitnami: keycloak</p> <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> <p><strong>Affected:</strong> Bitnami: keycloak</p> <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> https://cve.radiocsirt.org/vuln/bit-keycloak-2026-0871 https://cve.radiocsirt.org/vuln/euvd-2026-274859 EUVD-2026-274859 https://cve.radiocsirt.org/vuln/euvd-2026-274859 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0871 <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0871 https://cve.radiocsirt.org/vuln/ghsa-v4jw-m6rm-399h <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-server-spi-private</p> <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> <p><strong>Affected:</strong> Maven: org.keycloak:keycloak-server-spi-private</p> <p>A flaw was found in Keycloak. An administrator with `manage-users` permission can bypass the &#34;Only administrators can view&#34; setting for unmanaged attributes, allowing them to modify these attributes. This improper access control can lead to unauthorized changes to user profiles, even when the system is configured to restrict such modifications.</p> https://cve.radiocsirt.org/vuln/ghsa-v4jw-m6rm-399h https://cve.radiocsirt.org/vuln/jvndb-2026-026852 <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-2026-3911, CVE-2026-4282, CVE-2026-4325, CVE-2026-4634, CVE-2026-22745, CVE-2026-22748, CVE-2026-25854, CVE-2026-40972, CVE-2026-40975</p> <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035, CVE-2026-1190, CVE-2026-2092, CVE-2026-2575, CVE-2026-2673, CVE-2026-3009, CVE-2026-3121, CVE-2026-3429, CVE-2026-3872, CVE-2026-3911, CVE-2026-4282, CVE-2026-4325, CVE-2026-4634, CVE-2026-22745, CVE-2026-22748, CVE-2026-25854, CVE-2026-40972, CVE-2026-40975</p> https://cve.radiocsirt.org/vuln/jvndb-2026-026852 https://cve.radiocsirt.org/vuln/rhsa-2026:2365 <p>org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users keycloak: Incorrect ownership checks in /uma-policy/ org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation</p> <p>org.keycloak.services.resources.admin: Keycloak: Limited administrator can retrieve sensitive user attributes via Admin API org.keycloak/keycloak-services: Keycloak keycloak-services: Business logic flaw allows unauthorized token issuance for disabled users keycloak: Incorrect ownership checks in /uma-policy/ org.keycloak/keycloak-services: Keycloak: Unauthorized modification of unmanaged user attributes by administrators org.keycloak.protocol.oidc.grants: Disabled identity providers are still accepted for JWT Authorization Grant org.keycloak.services.resources.organizations: Keycloak: Unauthorized organization registration via improper invitation token validation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:2365 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0072 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0072