Threats Tagged 'cve-2026-15572'

Red Hat has issued a security advisory for Red Hat build of Keycloak 26.4.14 addressing multiple vulnerabilities including privilege escalation, authorization bypasses, arbitrary code execution, denial of service, and bypasses of security restrictions. These vulnerabilities affect various components such as the Admin UI, FGAPv2, DCR protocol, LDAP user search, SAML broker, and OIDC redirect URI processing. The advisory covers 17 distinct CVEs with high severity impacts. No explicit patch or fix details are provided in the advisory content.

Red Hat has issued a security advisory for the Red Hat build of Keycloak 26.6.5 addressing multiple vulnerabilities. These include authorization bypasses, privilege escalation, denial of service, arbitrary code execution, and security bypasses affecting various components such as admin UI extensions, FGAPv2, DCR policies, LDAP user searches, Quarkus REST, SAML broker, gRPC, HTTP requests, and OIDC redirect URI handling. The advisory covers 19 distinct CVEs with high severity. No explicit patch links are provided in the advisory, but updated packages are available from Red Hat's Customer Portal.

A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, which restricts which types of data mappers a client can use, fails to re-validate the mapper type during a client update if the mapper's configuration remains unchanged. An attacker with client registration privileges can exploit this by first registering an allowed mapper type with a malicious configuration and then swapping it for a restricted, high-privilege mapper type (such as one that hardcodes administrative roles). This allows the attacker to gain full administrative access to the Keycloak realm.