Search: CVE-2026-3190

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-3190Red Hat build of Keycloak 26.4 · Improper Handling of Insufficient Permissions or Privileges Medium4.3EPSS 0.3%2026-03-26CVE Database V5CVE-2026-3190 A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to enforce the `uma_protection` role check. This allows any authenticated user with a token issued for a resource server client, even without the `uma_protection` role, to enumerate all permission tickets in the system. This vulnerability partial leads to information disclosure. EPSS 0.3%Vulnerability	CVE Database V5	2026-03-26

Page 1 of 1