https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 04:28:59 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-82968 <p>A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacker with a different account on the same social provider to intercept the process and link their own account to the victim&#39;s local profile, gaining unauthorized access.</p> <p>A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacker with a different account on the same social provider to intercept the process and link their own account to the victim&#39;s local profile, gaining unauthorized access.</p> https://db.gcve.eu/vuln/fkie_cve-2026-82968 https://db.gcve.eu/vuln/ghsa-2w6p-j7xq-6p7v <p>A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacker with a different account on the same social provider to intercept the process and link their own account to the victim&#39;s local profile, gaining unauthorized access.</p> <p>A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacker with a different account on the same social provider to intercept the process and link their own account to the victim&#39;s local profile, gaining unauthorized access.</p> https://db.gcve.eu/vuln/ghsa-2w6p-j7xq-6p7v https://db.gcve.eu/vuln/rhsa-2026:95761 <p>org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI keycloak-broker: Keycloak: Privilege escalation to realm administrator via improper authorization in identity provider mapper org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing keycloak-services: keycloak-services: OIDC IdP update reuses masked client secret after token URL change keycloak-services: keycloak-services: Incomplete fix for CIBA brute-force lockout bypass at token redemption keycloak-services: keycloak-services: Group policy extendChildren matches sibling group path prefixes keycloak-services: keycloak-services: Client policy source-host wildcard domain matching bypass keycloak-services: keycloak-services: Client policy source-group condition bypass via duplicate group name matching keycloak-services: keycloak-services: Inactive out-of-audience token introspection leaks signed JWT claim keycloak-services: keycloak-services: SAML HTTP-Redirect binding response preserves query string leading to parameter pollution keycloak-services: keycloak-services: OIDC backchannel logout accepts unsigned forged logout tokens keycloak-services: keycloak-services: Name-only group claims let same-name groups satisfy path-specific group policies wildfly-el…</p> <p>org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI keycloak-broker: Keycloak: Privilege escalation to realm administrator via improper authorization in identity provider mapper org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing keycloak-services: keycloak-services: OIDC IdP update reuses masked client secret after token URL change keycloak-services: keycloak-services: Incomplete fix for CIBA brute-force lockout bypass at token redemption keycloak-services: keycloak-services: Group policy extendChildren matches sibling group path prefixes keycloak-services: keycloak-services: Client policy source-host wildcard domain matching bypass keycloak-services: keycloak-services: Client policy source-group condition bypass via duplicate group name matching keycloak-services: keycloak-services: Inactive out-of-audience token introspection leaks signed JWT claim keycloak-services: keycloak-services: SAML HTTP-Redirect binding response preserves query string leading to parameter pollution keycloak-services: keycloak-services: OIDC backchannel logout accepts unsigned forged logout tokens keycloak-services: keycloak-services: Name-only group claims let same-name groups satisfy path-specific group policies wildfly-el…</p> https://db.gcve.eu/vuln/rhsa-2026:95761