Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:20:00 +0000 CVE-2026-0707 — Keycloak: keycloak authorization header parsing leading to potential security control bypass https://cve.radiocsirt.org/vuln/cve-2026-0707 <p><strong>Affected:</strong> Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.10</p> <p>A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the &#34;Bearer&#34; authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.</p> <p><strong>Affected:</strong> Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.10</p> <p>A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the &#34;Bearer&#34; authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.</p> https://cve.radiocsirt.org/vuln/cve-2026-0707