Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-jkh6-bvx2-dycm
Vulnerability ID VCID-jkh6-bvx2-dycm
Aliases CVE-2026-1518
GHSA-fwhw-chw4-gh37
Summary Keycloak Server-Side Request Forgery (SSRF) vulnerability A flaw was found in Keycloak’s CIBA feature where insufficient validation of client-configured backchannel notification endpoints could allow blind server-side requests to internal services.
Status Published
Exploitability 0.5
Weighted Severity 2.7
Risk 1.4
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-918 Server-Side Request Forgery (SSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 2.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1518.json
cvssv3.1 2.7 https://access.redhat.com/security/cve/CVE-2026-1518
generic_textual LOW https://access.redhat.com/security/cve/CVE-2026-1518
ssvc Track https://access.redhat.com/security/cve/CVE-2026-1518
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00011 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
epss 0.00012 https://api.first.org/data/v1/epss?cve=CVE-2026-1518
cvssv3.1 2.7 https://bugzilla.redhat.com/show_bug.cgi?id=2433727
generic_textual LOW https://bugzilla.redhat.com/show_bug.cgi?id=2433727
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=2433727
cvssv3.1_qr LOW https://github.com/advisories/GHSA-fwhw-chw4-gh37
cvssv3.1 2.7 https://github.com/keycloak/keycloak
generic_textual LOW https://github.com/keycloak/keycloak
cvssv3.1 2.7 https://nvd.nist.gov/vuln/detail/CVE-2026-1518
generic_textual LOW https://nvd.nist.gov/vuln/detail/CVE-2026-1518
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1518.json
https://access.redhat.com/security/cve/CVE-2026-1518
https://api.first.org/data/v1/epss?cve=CVE-2026-1518
https://bugzilla.redhat.com/show_bug.cgi?id=2433727
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2026-1518
cpe:/a:redhat:build_keycloak: https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:/a:redhat:build_keycloak:
GHSA-fwhw-chw4-gh37 https://github.com/advisories/GHSA-fwhw-chw4-gh37
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-1518.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Found at https://access.redhat.com/security/cve/CVE-2026-1518
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-02T14:03:51Z/ Found at https://access.redhat.com/security/cve/CVE-2026-1518
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=2433727
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-02T14:03:51Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=2433727
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Found at https://github.com/keycloak/keycloak
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-1518
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.01396
EPSS Score 0.00011
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T12:52:59.862633+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-fwhw-chw4-gh37/GHSA-fwhw-chw4-gh37.json 38.0.0