Search: CVE-2026-103884

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2026-103884Red Hat build of Keycloak 26.6 · Improper Limitation of a Pathname to a Restricted Directory Medium6.5EPSS 0.2%2026-10-01CVE Database V5CVE-2026-103884 A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to attempt to read sensitive files from the local system or exhaust memory by loading extremely large files, potentially leading to information disclosure or a system crash. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-01

Page 1 of 1 · 1 duplicate CVE record merged