https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 02:34:56 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366870 EUVD-2026-366870 https://cve.radiocsirt.org/vuln/euvd-2026-366870 https://cve.radiocsirt.org/vuln/fkie_cve-2026-89298 <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-89298 https://cve.radiocsirt.org/vuln/ghsa-386r-m7rr-67p4 <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> https://cve.radiocsirt.org/vuln/ghsa-386r-m7rr-67p4