https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:35:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375563 EUVD-2026-375563 https://cve.radiocsirt.org/vuln/euvd-2026-375563 https://cve.radiocsirt.org/vuln/fkie_cve-2026-79651 <p>A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.</p> <p>A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-79651 https://cve.radiocsirt.org/vuln/ghsa-8qv5-pjhw-3gx4 <p>A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.</p> <p>A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.</p> https://cve.radiocsirt.org/vuln/ghsa-8qv5-pjhw-3gx4 https://cve.radiocsirt.org/vuln/rhsa-2026:68276 <p>keycloak-services: keycloak-services: Privilege escalation via impersonation role allows takeover of realm administrator accounts keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state keycloak-services: keycloak-services: Broker-originated username collision causes account lockout keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration keycloak-services: keycloak-services: Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments keycloak-services: keycloak-services: unauthenticated DoS via unbounded locale caching</p> <p>keycloak-services: keycloak-services: Privilege escalation via impersonation role allows takeover of realm administrator accounts keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state keycloak-services: keycloak-services: Broker-originated username collision causes account lockout keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration keycloak-services: keycloak-services: Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments keycloak-services: keycloak-services: unauthenticated DoS via unbounded locale caching</p> https://cve.radiocsirt.org/vuln/rhsa-2026:68276 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3418 <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Keycloak ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3418