Crítica
CVE-2026-18963
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 98
Restablecer filtros
Alta
CVE-2026-2092
Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
Alta
CVE-2026-9795
Keycloak has privilege escalation via improper scope mapping enforcement
Baja
CVE-2026-9088
Keycloak: Information disclosure due to user profile permission bypass
Media
CVE-2026-9802
Keycloak has Insufficient Session Expiration
Media
CVE-2026-9803
Keycloak has an Out-of-bounds Read
Media
CVE-2026-9798
Keycloak has an Authentication Bypass by Primary Weakness
Media
CVE-2026-9793
Keycloak has an Improper Verification of Cryptographic Signature issue
Media
CVE-2026-9791
Keycloak Vulnerable to Incorrect Authorization
Media
CVE-2026-9794
Keycloak Generates an Error Message Containing Sensitive Information
Media
CVE-2026-9792
Keycloak Vulnerable to Improper Handling of Insufficient Permissions or Privilege
Media
CVE-2026-9704
Keycloak Vulnerable to Improper Validation of Specified Quantity in Input
Media
CVE-2026-9689
Keycloak Services has Improper Validation of Consistency within Input
Media
CVE-2026-9087
Keycloak: Insufficient verification proof scoping enables identity provider account linking attack and account compromise
Alta
CVE-2026-7504
Keycloak: Open redirect when using wildcard valid redirect URIs in Keycloak
Alta
CVE-2026-7507
Keycloak: Session fixation in OIDC login flow that can lead to account takeover
Alta
CVE-2026-7571
Keycloak: Access token disclosure and implicit flow bypass via forged client data
Media
CVE-2026-4630
Keycloak Protection API allows authenticated clients to access and modify resources owned by other Resource Servers
Media
CVE-2026-37981
Keycloak Account Resources user lookup contains broken access control
Media
CVE-2026-37982
Keycloak: Unauthorized account takeover via WebAuthn token replay
Media
CVE-2026-37979
Keycloak: Information disclosure via OIDC token introspection endpoint audience bypass
Media
CVE-2026-37978
Keycloak: Information Disclosure via evaluate-scopes Admin API
Media
CVE-2026-8922
Keycloak: Revoked Tokens Can Remain Active When Both Realm-Level and Client-Level `notBefore` Revocation Policies are Configured
Media
CVE-2026-8830
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.