https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 21:51:02 +0000 https://db.gcve.eu/vuln/cve-2026-2092 <p><strong>Affected:</strong> Red Hat build of Keycloak 26.2, Red Hat build of Keycloak 26.2.14, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.10, Red Hat Single Sign-On 7</p> <p>A flaw was found in Keycloak. Keycloak&#39;s Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.</p> <p><strong>Affected:</strong> Red Hat build of Keycloak 26.2, Red Hat build of Keycloak 26.2.14, Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.10, Red Hat Single Sign-On 7</p> <p>A flaw was found in Keycloak. Keycloak&#39;s Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.</p> https://db.gcve.eu/vuln/cve-2026-2092