Количество 4
Количество 4
CVE-2026-2603
A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication.
CVE-2026-2603
A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication.
CVE-2026-2603
A flaw was found in Keycloak. A remote attacker could bypass security ...
GHSA-x4p7-7chp-64hq
Keycloak: Unauthorized authentication via disabled SAML Identity Provider
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-2603 A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication. | CVSS3: 8.1 | 0% Низкий | 23 дня назад |
 | CVE-2026-2603 A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication. | CVSS3: 8.1 | 0% Низкий | 10 дней назад |
| CVE-2026-2603 A flaw was found in Keycloak. A remote attacker could bypass security ... | CVSS3: 8.1 | 0% Низкий | 10 дней назад |
| GHSA-x4p7-7chp-64hq Keycloak: Unauthorized authentication via disabled SAML Identity Provider | CVSS3: 8.1 | 0% Низкий | 10 дней назад |
Уязвимостей на страницу