Search for packages
| purl | pkg:maven/org.keycloak/keycloak-services@26.6.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6g26-7cx5-mrrg
Aliases: CVE-2026-9088 |
Keycloak: Information disclosure due to user profile permission bypass A flaw was found in org.keycloak.services. An administrator with delegated access … |
Vulnerable |
|
GHSA-wcvj-vpvw-9rr5
Aliases: CVE-2026-9689 |
Keycloak Services has Improper Validation of Consistency within Input A flaw was found in Keycloak, an open-source identity and access … | There are no reported fixed by versions. |
|
GHSA-p3v8-fm5p-v84h
Aliases: CVE-2026-9793 |
Keycloak has an Improper Verification of Cryptographic Signature issue A flaw was found in Keycloak. When a JSON Web Encryption … | There are no reported fixed by versions. |
|
GHSA-q6h7-xxp7-7429
Aliases: CVE-2026-9798 |
Keycloak has an Authentication Bypass by Primary Weakness A flaw was found in Keycloak, an open-source identity and access management … | There are no reported fixed by versions. |
|
GHSA-4gv3-mc9p-5wqc
Aliases: CVE-2026-18963 |
Keycloak: Unauthenticated account takeover via reset-credentials flow bypass A flaw was found in the reset-credentials flow of the keycloak-services component, … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-8hcx-p7m8-gc28
|
Duplicate Advisory: Keycloak has privilege escalation via improper scope mapping enforcement ### Duplicate Advisory This advisory has been withdrawn because … | |
|
GHSA-32h4-44jj-c5vx
|
Keycloak has privilege escalation via improper scope mapping enforcement ### Description A flaw was found in Keycloak's Fine-Grained Admin Permissions … |
CVE-2026-9795
|
|
GHSA-v3f7-2p4r-mwfw
|
Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass ### Description A flaw was found in Keycloak. A … |
CVE-2026-9086
|
|
GHSA-w3p3-7cjg-vgfw
|
Keycloak allows unauthorized access to resources via uma permission ticket bypass ### Description A flaw was found in org.keycloak.authorization. An … |
CVE-2026-9799
|
|
GHSA-r7rc-c989-86g6
|
Keycloak: Attacker can re-enable and take over disabled clients via registration access token ### Description A flaw was found in … |
CVE-2026-9705
|
|
GHSA-9jrw-8xf7-xqhq
|
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing ### Description A flaw was found in Keycloak. A realm … |
CVE-2026-9083
|
|
GHSA-f5p5-6xmx-p252
|
Keycloak vulnerable to authorization bypass via incorrect uri comparison ### Description A flaw was found in Keycloak Policy Enforcer. This … |
CVE-2026-9800
|