Search: CVE-2026-114232

CVE-2026-114232 is a vulnerability in the Red Hat build of Keycloak 26.4 where the UMA Protection API fails to validate the resourceType field during policy creation. This flaw allows an authenticated attacker to create policies affecting resources owned by other users within the same realm, potentially leading to unauthorized access or modification of sensitive data. The vulnerability has a high severity score of 8.1 CVSS v3.1 and impacts confidentiality and integrity without affecting availability.