https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 06:10:15 +0000 https://db.gcve.eu/vuln/cve-2026-117691 <p><strong>Affected:</strong> Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.9, Red Hat Single Sign-On 7</p> <p>A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like %53AMLResponse) while the signature verification logic only checks literal parameter names. An attacker can use this discrepancy to provide a crafted, unsigned SAML message that the server processes instead of a legitimately signed one, leading to full account takeover of federated users.</p> <p><strong>Affected:</strong> Red Hat build of Keycloak 26.6, Red Hat build of Keycloak 26.6.9, Red Hat Single Sign-On 7</p> <p>A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like %53AMLResponse) while the signature verification logic only checks literal parameter names. An attacker can use this discrepancy to provide a crafted, unsigned SAML message that the server processes instead of a legitimately signed one, leading to full account takeover of federated users.</p> https://db.gcve.eu/vuln/cve-2026-117691