Поиск уязвимостей
Количество 7
Количество 7
CVE-2026-1529
A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access.
CVE-2026-1529
A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access.
CVE-2026-1529
A flaw was found in Keycloak. An attacker can exploit this vulnerabili ...
GHSA-hcvw-475w-8g7p
Keycloak affected by improper invitation token validation
BDU:2026-01704
Уязвимость компонента JSON Web Token Handler программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2026-4227
ALT-PU-2026-4227: package `keycloak` update to version 26.5.5-alt1
ALT-PU-2026-4903
ALT-PU-2026-4903: package `keycloak` update to version 26.5.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-1529 A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access. | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
 | CVE-2026-1529 A flaw was found in Keycloak. An attacker can exploit this vulnerability by modifying the organization ID and target email within a legitimate invitation token's JSON Web Token (JWT) payload. This lack of cryptographic signature verification allows the attacker to successfully self-register into an unauthorized organization, leading to unauthorized access. | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
| CVE-2026-1529 A flaw was found in Keycloak. An attacker can exploit this vulnerabili ... | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
| GHSA-hcvw-475w-8g7p Keycloak affected by improper invitation token validation | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
 | BDU:2026-01704 Уязвимость компонента JSON Web Token Handler программного средства для управления идентификацией и доступом Keycloak, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 8.1 | 0% Низкий | 9 месяцев назад |
| ALT-PU-2026-4227 ALT-PU-2026-4227: package `keycloak` update to version 26.5.5-alt1 | CVSS3: 8.8 | 8 месяцев назад | |
| ALT-PU-2026-4903 ALT-PU-2026-4903: package `keycloak` update to version 26.5.6-alt1 | CVSS3: 8.8 | 8 месяцев назад |
Уязвимостей на страницу