CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-110931

    🚨 CVE-2026-110931 A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. The issue occurs...

  • CVE-2026-110932

    🚨 CVE-2026-110932 A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution. The issue...

  • CVE-2026-112208

    🚨 CVE-2026-112208 A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. Keycloak is an open-source...

  • CVE-2026-114232

    🚨 CVE-2026-114232 A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages...

  • CVE-2026-82965

    🚨 CVE-2026-82965 A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solution. The SAML...

  • CVE-2026-92855

    🚨 CVE-2026-92855 A flaw was found in the SAML identity broker component of Keycloak, which is used to delegate authentication to external identity...

  • CVE-2026-92857

    🚨 CVE-2026-92857 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own...

  • CVE-2026-93998

    🚨 CVE-2026-93998 A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication...

  • CVE-2026-96453

    🚨 CVE-2026-96453 A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the...

  • CVE-2026-97174

    🚨 CVE-2026-97174 A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation of Keycloak. The CIBA endpoint fails to...

  • CVE-2026-97847

    🚨 CVE-2026-97847 A flaw was found in the protocol mapper and identity resolution components of Keycloak. The issue occurs when a client manager...

  • CVE-2026-107124

    🚨 CVE-2026-107124 A flaw was found in the OIDC logout endpoint of the keycloak-services component, which handles user session termination in Red...

  • CVE-2026-109081

    🚨 CVE-2026-109081 A flaw was found in Keycloak. The Dynamic Client Registration (DCR) endpoint does not properly validate authorization when...

  • CVE-2026-19688

    🚨 CVE-2026-19688 A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The Admin API fails to verify the...

  • CVE-2026-92856

    🚨 CVE-2026-92856 A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. The issue occurs when...

  • CVE-2026-96447

    🚨 CVE-2026-96447 A flaw was found in the TokenManager component of Keycloak, an open-source identity and access management solution. The issue...

  • CVE-2026-96460

    🚨 CVE-2026-96460 A flaw was found in the token exchange mechanism of Keycloak. When using Standard Token Exchange V2, the system issues new tokens...

  • CVE-2026-96547

    🚨 CVE-2026-96547 A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management...

Статистика статей

Статьи
53,084
Просмотры
239,652
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху