Поиск уязвимостей
Количество 6
Количество 6
CVE-2026-14209
A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path.
CVE-2026-14209
A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path.
CVE-2026-14209
A vulnerability was discovered in Keycloak's Admin UI extension that a ...
GHSA-xmfr-m52w-m2hx
A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path.
ALT-PU-2026-13025
ALT-PU-2026-13025: package `keycloak` update to version 26.7.1-alt1
ALT-PU-2026-12509
ALT-PU-2026-12509: package `keycloak` update to version 26.7.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-14209 A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path. | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
 | CVE-2026-14209 A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path. | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
| CVE-2026-14209 A vulnerability was discovered in Keycloak's Admin UI extension that a ... | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
| GHSA-xmfr-m52w-m2hx A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path. | CVSS3: 4.3 | 0% Низкий | 4 месяца назад |
| ALT-PU-2026-13025 ALT-PU-2026-13025: package `keycloak` update to version 26.7.1-alt1 | CVSS3: 7.5 | 3 месяца назад | |
| ALT-PU-2026-12509 ALT-PU-2026-12509: package `keycloak` update to version 26.7.1-alt1 | CVSS3: 7.5 | 3 месяца назад |
Уязвимостей на страницу