https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 09:02:09 +0000 https://db.gcve.eu/vuln/cve-2026-116468 <p><strong>Affected:</strong> Red Hat Build of Keycloak, Red Hat Single Sign-On 7</p> <p>A flaw was found in the group-move and organization group reparenting endpoints of the keycloak-services component. This component is responsible for core authentication and authorization services in the Red Hat build of Keycloak. The issue occurs because the system fails to check if a target parent group confers administrative roles when a group is moved. A delegated administrator can exploit this to move a group they control under an administrative group, causing all members to inherit full realm-admin privileges and gain complete control over the realm.</p> <p><strong>Affected:</strong> Red Hat Build of Keycloak, Red Hat Single Sign-On 7</p> <p>A flaw was found in the group-move and organization group reparenting endpoints of the keycloak-services component. This component is responsible for core authentication and authorization services in the Red Hat build of Keycloak. The issue occurs because the system fails to check if a target parent group confers administrative roles when a group is moved. A delegated administrator can exploit this to move a group they control under an administrative group, causing all members to inherit full realm-admin privileges and gain complete control over the realm.</p> https://db.gcve.eu/vuln/cve-2026-116468