Логотип exploitDog
bind:CVE-2026-4282
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-4282

Количество 4

Количество 4

redhat логотип

CVE-2026-4282

8 дней назад

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2026-4282

8 дней назад

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation.

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2026-4282

8 дней назад

A flaw was found in Keycloak. The SingleUseObjectProvider, a global ke ...

CVSS3: 7.4
EPSS: Низкий
github логотип

GHSA-hj93-h7pg-fh6v

8 дней назад

Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

CVSS3: 7.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2026-4282

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation.

CVSS3: 7.4
0%
Низкий
8 дней назад
nvd логотип
CVE-2026-4282

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation.

CVSS3: 7.4
0%
Низкий
8 дней назад
debian логотип
CVE-2026-4282

A flaw was found in Keycloak. The SingleUseObjectProvider, a global ke ...

CVSS3: 7.4
0%
Низкий
8 дней назад
github логотип
GHSA-hj93-h7pg-fh6v

Keycloak: Privilege escalation via forged authorization codes due to SingleUseObjectProvider isolation flaw

CVSS3: 7.4
0%
Низкий
8 дней назад

Уязвимостей на страницу