Threats tagged 'bit-keycloak-2026-3872'

Red Hat has released an important security update for its build of Keycloak, version 26.2.15, addressing multiple vulnerabilities. These include information disclosure via redirect_uri validation bypass, replay of action tokens, UMA policy bypass allowing unauthorized resource access, privilege escalation through forged authorization codes, and denial of service via excessive OpenID Connect scope parameter processing. The update improves authentication and single sign-on security for web and mobile applications.