https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:52:21 +0000 https://cve.radiocsirt.org/vuln/cve-2025-7365 <p><strong>Affected:</strong> keycloak, Red Hat build of Keycloak 26, Red Hat build of Keycloak 26.0, Red Hat build of Keycloak 26.2</p> <p>A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login, the attacker will subsequently be prompted to &#34;review profile&#34; information. This vulnerability allows the attacker to modify their email address to match that of a victim&#39;s account, triggering a verification email sent to the victim&#39;s email address. The attacker&#39;s email address is not present in the verification email content, making it a potential phishing opportunity. If the victim clicks the verification link, the attacker can gain access to the victim&#39;s account.</p> <p><strong>Affected:</strong> keycloak, Red Hat build of Keycloak 26, Red Hat build of Keycloak 26.0, Red Hat build of Keycloak 26.2</p> <p>A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login, the attacker will subsequently be prompted to &#34;review profile&#34; information. This vulnerability allows the attacker to modify their email address to match that of a victim&#39;s account, triggering a verification email sent to the victim&#39;s email address. The attacker&#39;s email address is not present in the verification email content, making it a potential phishing opportunity. If the victim clicks the verification link, the attacker can gain access to the victim&#39;s account.</p> https://cve.radiocsirt.org/vuln/cve-2025-7365