CVE-2026-96453High· 8.0▾ TwilightA flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. When a custom truststore is provided to verify the server identity, the tool incorrectly accepts any…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. When a custom truststore is provided to verify the server identity, the tool incorrectly accepts any self-signed certificate as long as the hostname matches. This allows a network attacker to impersonate the Keycloak server, steal administrative credentials, and perform unauthorized management actions.
keycloak-corekeycloak-admin-cli (all versions)rhbk/keycloak-rhel9 (all versions)rhbk/keycloak-rhel9-operator (all versions)keycloak-corejboss-eap-7/eap74-els-openjdk11-openshift-rhel8jboss-eap-7/eap74-els-openjdk17-openshift-rhel8jboss-eap-7/eap74-els-openjdk8-openshift-rhel8keycloak-corekeycloak-corecandlepinkeycloak-admin-cli (all versions)keycloak-corerh-sso7-keycloak (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93998High· 7.4Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
CVE-2024-7383High· 7.4Libnbd: nbd server improper certificate validation
CVE-2025-22874High· 7.5crypto/x509: Usage of ExtKeyUsageAny disables policy validation in crypto/x509 (CVE-2025-22874)
CVE-2026-123151High· 7.5Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
CVE-2026-97174Medium· 6.8Keycloak-services: keycloak-services: ciba sub parameter injection causes attacker authentication to issue victim tokens
CVE-2026-107123High· 7.5Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsing