https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 07:05:48 +0000 https://db.gcve.eu/vuln/cve-2026-97367 <p><strong>Affected:</strong> Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat Single Sign-On 7</p> <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> <p><strong>Affected:</strong> Red Hat build of Keycloak 26.4, Red Hat build of Keycloak 26.4.17, Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.8, Red Hat Single Sign-On 7</p> <p>A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification. A malicious client owner can manipulate their own security tokens to point to a different user&#39;s active session. This allows the attacker to access and modify the victim&#39;s account information, potentially leading to a full account takeover by changing the recovery email and resetting the password.</p> https://db.gcve.eu/vuln/cve-2026-97367