keycloak v26.8.2 — Open Source Identity and Access Management For Modern Applications and Services https://ktp.sh/u6nNoVUB0G
November 6, 2026 at 12:59 PM
keycloak v26.8.2 — Open Source Identity and Access Management For Modern Applications and Services https://ktp.sh/u6nNoVUB0G
Le tag 26.4.18 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.4.18 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.6.9 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.6.9 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.8.2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.8.2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.4.17 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.4.17 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.6.8 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.6.8 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.4.18-redhat2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.4.18-redhat2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
Le tag 26.6.9-redhat2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
November 7, 2026 at 6:08 AM
Le tag 26.6.9-redhat2 vient d'apparaitre sur le project keycloak/keycloak
Voir le changelog
Voir le changelog
#keycloak 26.8.2 just dropped, contains tons of fixes. Patch notes: https://github.com/keycloak/keycloak/releases/tag/26.8.2
Release 26.8.2 · keycloak/keycloak
Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Security fixes #53061 [CVE-2026-92358] Cross-browser fallback proof survives successful ...
github.com
November 5, 2026 at 4:50 PM
#keycloak 26.8.2 just dropped, contains tons of fixes. Patch notes: https://github.com/keycloak/keycloak/releases/tag/26.8.2
SSO und Multifaktor-Authentifizierung – mehr Sicherheit und einfache Zugangsverwaltung mit dem OpenID-Connect-Provider Keycloak. #Identity Management
iX-Workshop: Mit Keycloak zum sicheren Identity- und Access-Management
SSO und Multifaktor-Authentifizierung – mehr Sicherheit und einfache Zugangsverwaltung mit dem OpenID-Connect-Provider Keycloak.
www.heise.de
November 7, 2026 at 9:03 AM
SSO und Multifaktor-Authentifizierung – mehr Sicherheit und einfache Zugangsverwaltung mit dem OpenID-Connect-Provider Keycloak. #Identity Management
Patch watch: CVE-2026-117691 (Red Hat Build of Keycloak, CVSS 9.1). A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. No public exploit reported yet. #CVE #infosec
threatroundup.com/cve/cve-2026...
threatroundup.com/cve/cve-2026...
November 7, 2026 at 2:10 PM
Patch watch: CVE-2026-117691 (Red Hat Build of Keycloak, CVSS 9.1). A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. No public exploit reported yet. #CVE #infosec
threatroundup.com/cve/cve-2026...
threatroundup.com/cve/cve-2026...
November 5, 2026 at 5:33 PM
🔴 CVE-2026-117691 - Critical (9.1)
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs b...
https://www.thehackerwire.com/vulnerability/CVE-2026-117691/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs b...
https://www.thehackerwire.com/vulnerability/CVE-2026-117691/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 5, 2026 at 2:47 PM
🔴 CVE-2026-117691 - Critical (9.1)
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs b...
https://www.thehackerwire.com/vulnerability/CVE-2026-117691/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs b...
https://www.thehackerwire.com/vulnerability/CVE-2026-117691/
#infosec #cybersecurity #CVE #vulnerability #security #patchstack
[Backport release-26.05] keycloak: 26.8.1 -> 26.8.2
https://github.com/NixOS/nixpkgs/pull/583693
#security
https://github.com/NixOS/nixpkgs/pull/583693
#security
November 5, 2026 at 6:06 PM
[Backport release-26.05] keycloak: 26.8.1 -> 26.8.2
https://github.com/NixOS/nixpkgs/pull/583693
#security
https://github.com/NixOS/nixpkgs/pull/583693
#security
To put another way.... contribute to www.keycloak.org or start a company that maintains instances and support for customers. A RedHat business model is still viable.
Keycloak
Keycloak - the open source identity and access management solution. Add single-sign-on and authentication to applications and secure services with minimum effort.
www.keycloak.org
November 2, 2026 at 1:09 PM
To put another way.... contribute to www.keycloak.org or start a company that maintains instances and support for customers. A RedHat business model is still viable.
CVE-2026-120984 - red hat build of keycloak
The client management feature in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 does not fully clear a temporary session value when a client is created or imported…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
The client management feature in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 does not fully clear a temporary session value when a client is created or imported…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
CVE-2026-120984: Keycloak lets client admins run code on server
The client management feature in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 does not fully clear a temporary session value when a client is.
stackflag.com
November 7, 2026 at 2:00 PM
CVE-2026-120984 - red hat build of keycloak
The client management feature in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 does not fully clear a temporary session value when a client is created or imported…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
The client management feature in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 does not fully clear a temporary session value when a client is created or imported…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
keycloak v26.8.2 https://kitploit.com/en/posts/keycloak-c678f4ca8f41a1e7
keycloak v26.8.2 — Open Source Identity and Access Management For Modern Applications and Services | Kitploit
Open Source Identity and Access Management For Modern Applications and Services
kitploit.com
November 6, 2026 at 12:36 PM
keycloak v26.8.2 https://kitploit.com/en/posts/keycloak-c678f4ca8f41a1e7
Passkeys mean nothing if account recovery still vulnerable to phishing?
We closed the gap with our #Keycloak extension using #OpenID4VP and #DigitalCredentials on Android
⚡Zero email codes
⚡No inbox switching
⚡Native experience
Phishing-resistant security across the entire account lifecycle
We closed the gap with our #Keycloak extension using #OpenID4VP and #DigitalCredentials on Android
⚡Zero email codes
⚡No inbox switching
⚡Native experience
Phishing-resistant security across the entire account lifecycle
November 7, 2026 at 11:45 AM
Passkeys mean nothing if account recovery still vulnerable to phishing?
We closed the gap with our #Keycloak extension using #OpenID4VP and #DigitalCredentials on Android
⚡Zero email codes
⚡No inbox switching
⚡Native experience
Phishing-resistant security across the entire account lifecycle
We closed the gap with our #Keycloak extension using #OpenID4VP and #DigitalCredentials on Android
⚡Zero email codes
⚡No inbox switching
⚡Native experience
Phishing-resistant security across the entire account lifecycle
Export your Keycloak realm config (clients, roles, auth flows, IdP mappings) to JSON and migrate it to another instance. 233 lines of Python, intermediate level, ready to run. #python #keycloak #security https://www.valtersit.com/python/keycloak-realm-exporter-and-migrator/
Keycloak Realm Exporter and Migrator
www.valtersit.com
November 3, 2026 at 3:40 AM
Export your Keycloak realm config (clients, roles, auth flows, IdP mappings) to JSON and migrate it to another instance. 233 lines of Python, intermediate level, ready to run. #python #keycloak #security https://www.valtersit.com/python/keycloak-realm-exporter-and-migrator/
CVE-2026-117691 - red hat build of keycloak
The SAML login process in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 can be tricked by using specially encoded parameter names, bypassing signature checks. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
The SAML login process in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 can be tricked by using specially encoded parameter names, bypassing signature checks. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
CVE-2026-117691: Keycloak SAML redirect signature bypass allows account takeover
The SAML login process in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 can be tricked by using specially encoded parameter names, bypassing.
stackflag.com
November 5, 2026 at 2:40 PM
CVE-2026-117691 - red hat build of keycloak
The SAML login process in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 can be tricked by using specially encoded parameter names, bypassing signature checks. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
The SAML login process in Red Hat Build of Keycloak and Red Hat Single Sign-On 7 can be tricked by using specially encoded parameter names, bypassing signature checks. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
#redhat #CVE #infosec
🚨 EUVD-2026-117919
📊 4.9/10
📝 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117919
#cybersecurity #infosec #cve #euvd
📊 4.9/10
📝 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117919
#cybersecurity #infosec #cve #euvd
November 6, 2026 at 7:01 AM
🚨 EUVD-2026-117919
📊 4.9/10
📝 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117919
#cybersecurity #infosec #cve #euvd
📊 4.9/10
📝 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when Keycloak acts as an intermediary b...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117919
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-117564
📊 7.5/10
🏢 Red Hat
📝 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to ver...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117564
#cybersecurity #infosec #cve #euvd
📊 7.5/10
🏢 Red Hat
📝 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to ver...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117564
#cybersecurity #infosec #cve #euvd
November 6, 2026 at 9:05 PM
🚨 EUVD-2026-117564
📊 7.5/10
🏢 Red Hat
📝 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to ver...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117564
#cybersecurity #infosec #cve #euvd
📊 7.5/10
🏢 Red Hat
📝 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to ver...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117564
#cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-117568
📊 8.1/10
🏢 Red Hat
📝 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access man...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117568
#cybersecurity #infosec #cve #euvd
📊 8.1/10
🏢 Red Hat
📝 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access man...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117568
#cybersecurity #infosec #cve #euvd
November 6, 2026 at 6:04 PM
🚨 EUVD-2026-117568
📊 8.1/10
🏢 Red Hat
📝 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access man...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117568
#cybersecurity #infosec #cve #euvd
📊 8.1/10
🏢 Red Hat
📝 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source identity and access man...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117568
#cybersecurity #infosec #cve #euvd
CVE-2026-9797 - Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
CVE ID : CVE-2026-9797
Published : Nov. 6, 2026, 6:36 a.m. | 36 minutes ago
Description : A flaw was found in Keycloak's administrative servi...
CVE ID : CVE-2026-9797
Published : Nov. 6, 2026, 6:36 a.m. | 36 minutes ago
Description : A flaw was found in Keycloak's administrative servi...
CVE-2026-9797 - Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
A flaw was found in Keycloak's administrative services (org.keycloak.services.resources.admin). A highly privileged attacker, authenticated with a 'manage-clients' role, could exploit this vulnerability through several methods, including manipulating client JSON Web Key Sets (JWKS), swapping client authenticator types and resetting secrets, or downloading legitimate signing keys. Successful exploitation allows the attacker …
cvefeed.io
November 6, 2026 at 7:42 AM
CVE-2026-9797 - Keycloak: keycloak: privilege escalation via client authentication manipulation by an authenticated administrator
CVE ID : CVE-2026-9797
Published : Nov. 6, 2026, 6:36 a.m. | 36 minutes ago
Description : A flaw was found in Keycloak's administrative servi...
CVE ID : CVE-2026-9797
Published : Nov. 6, 2026, 6:36 a.m. | 36 minutes ago
Description : A flaw was found in Keycloak's administrative servi...
🚨 EUVD-2026-117607
📊 8.1/10
📝 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validate...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117607
#cybersecurity #infosec #cve #euvd
📊 8.1/10
📝 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validate...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117607
#cybersecurity #infosec #cve #euvd
November 5, 2026 at 6:02 PM
🚨 EUVD-2026-117607
📊 8.1/10
📝 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validate...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117607
#cybersecurity #infosec #cve #euvd
📊 8.1/10
📝 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. A flaw in how Keycloak validate...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117607
#cybersecurity #infosec #cve #euvd