https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:28:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343475 EUVD-2026-343475 https://cve.radiocsirt.org/vuln/euvd-2026-343475 https://cve.radiocsirt.org/vuln/fkie_cve-2026-18217 <p>A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can craft a request that includes malicious parameters. When a user authenticates, Keycloak appends its legitimate response to the attacker&#39;s parameters. This can cause some service providers to process the attacker&#39;s data instead of the real login information, potentially leading to a user being logged into the wrong account.</p> <p>A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can craft a request that includes malicious parameters. When a user authenticates, Keycloak appends its legitimate response to the attacker&#39;s parameters. This can cause some service providers to process the attacker&#39;s data instead of the real login information, potentially leading to a user being logged into the wrong account.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-18217 https://cve.radiocsirt.org/vuln/ghsa-82v3-6227-jc8x <p>A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can craft a request that includes malicious parameters. When a user authenticates, Keycloak appends its legitimate response to the attacker&#39;s parameters. This can cause some service providers to process the attacker&#39;s data instead of the real login information, potentially leading to a user being logged into the wrong account.</p> <p>A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can craft a request that includes malicious parameters. When a user authenticates, Keycloak appends its legitimate response to the attacker&#39;s parameters. This can cause some service providers to process the attacker&#39;s data instead of the real login information, potentially leading to a user being logged into the wrong account.</p> https://cve.radiocsirt.org/vuln/ghsa-82v3-6227-jc8x https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2614 <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und sensible Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um seine Privilegien zu erhöhen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und sensible Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2614