CVE-2026-118947Medium· 4.3▾ SunlitA flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled,…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to update resources they do not own by providing a target resource ID in a request. This can lead to unauthorized modification of resource configurations, such as names, URIs, and scopes.
keycloak-services (all versions)rhbk/keycloak-rhel9 (all versions)keycloak-servicesRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-118959Medium· 5.4Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter
CVE-2026-117859Medium· 5.4Keycloak-services: keycloak-services: par single-use bypass via flow restart
CVE-2026-118030Medium· 4.2Keycloak-services: keycloak-services: hotp race condition allows single otp code reuse across concurrent logins
CVE-2026-118425Medium· 6.8Keycloak-services: keycloak-services: redirect uri domain allowlist bypass via dns resolution to loopback
CVE-2026-117627Medium· 5.4Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions
CVE-2026-117688Medium· 5.3Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration