5 Total advisories
5 Vulnerabilities
0 Malware
Vulnerabilities
HIGH 8.1
CVE-2026-2603
Keycloak: Unauthorized authentication via disabled SAML Identity Provider
MEDIUM 4.3
CVE-2026-3190
Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure
MEDIUM 4.9
CVE-2026-0871
Keycloak Server Private SPI: Improper Access Control Allows Administrators to Bypass Attribute Visibility Restrictions and Modify Unmanaged User Profile Attributes
MEDIUM 4.8
CVE-2020-10776
Cross-site Scripting in keycloak
LOW 3.5
CVE-2023-2585
Client Spoofing within the Keycloak Device Authorisation Grant
Ready to move
Start Securing
Free, no credit card | First findings in minutes