https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 03:43:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-97367 <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> https://db.gcve.eu/vuln/fkie_cve-2026-97367 https://db.gcve.eu/vuln/ghsa-mw2g-fcj2-v82h <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> https://db.gcve.eu/vuln/ghsa-mw2g-fcj2-v82h https://db.gcve.eu/vuln/rhsa-2026:95759 <p>org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing keycloak-services: keycloak-services: SAML HTTP-Redirect binding response preserves query string leading to parameter pollution wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass keycloak-services: keycloak-services: Unauthenticated Denial of Service via SAML SOAP endpoint unbounded XML parsing keycloak-services: keycloak-services: SAML broker accepts holder-of-key assertions without proof of key possession keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokens io.nett…</p> <p>org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcpkix-jdk15on: Bouncy Castle for Java: Name Constraints bypass via trailing dot in rfc822Name and URI org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification bouncycastle: Bouncy Castle for Java: Denial of Service via lazy ASN.1 sequence processing keycloak-services: keycloak-services: SAML HTTP-Redirect binding response preserves query string leading to parameter pollution wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names io.netty/netty: Netty: Information disclosure via CORS Vary header overwrite io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext org.hibernate/hibernate-core: Hibernate ORM: SQL Injection via unescaped JSON path segment allows data exfiltration and authorization bypass keycloak-services: keycloak-services: Unauthenticated Denial of Service via SAML SOAP endpoint unbounded XML parsing keycloak-services: keycloak-services: SAML broker accepts holder-of-key assertions without proof of key possession keycloak-services: keycloak-services: DCR protocol mapper config not validated, allowing IAT holders to forge sub and aud claims in signed tokens io.nett…</p> https://db.gcve.eu/vuln/rhsa-2026:95759