https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 14:06:48 +0000 https://cve.radiocsirt.org/vuln/cve-2026-89298 <p><strong>Affected:</strong> Red Hat Build of Keycloak, Red Hat Single Sign-On 7</p> <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> <p><strong>Affected:</strong> Red Hat Build of Keycloak, Red Hat Single Sign-On 7</p> <p>A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user with the view-clients role accesses the client registration endpoint to retrieve client details. Due to a failure to mask sensitive information, the service returns the client&#39;s confidential secret in cleartext. This could allow a read-only administrator to obtain full access to the affected client&#39;s account and potentially escalate their privileges within the realm.</p> https://cve.radiocsirt.org/vuln/cve-2026-89298