CVE Уведомления

Мониторинг уязвимостей, аналитика угроз и оперативные CVE-оповещения. База данных актуальных уязвимостей (Common Vulnerabilities and Exposures) с подробным описанием рисков, оценкой критичности по шкале CVSS и официальными рекомендациями по устранению.

  • CVE-2026-94217

    🚨 CVE-2026-94217 A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token...

  • CVE-2026-95503

    🚨 CVE-2026-95503 A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When...

  • CVE-2026-96445

    🚨 CVE-2026-96445 A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs...

  • CVE-2026-96446

    🚨 CVE-2026-96446 A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent...

  • CVE-2026-97177

    🚨 CVE-2026-97177 A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled...

  • CVE-2026-97311

    🚨 CVE-2026-97311 A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve...

  • CVE-2026-97846

    🚨 CVE-2026-97846 Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that...

  • CVE-2026-96448

    🚨 CVE-2026-96448 A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access management solution...

  • CVE-2026-103884

    🚨 CVE-2026-103884 A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the...

  • CVE-2026-105305

    🚨 CVE-2026-105305 A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component...

  • CVE-2026-107121

    🚨 CVE-2026-107121 A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is...

  • CVE-2026-107623

    🚨 CVE-2026-107623 A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes...

  • CVE-2026-107889

    🚨 CVE-2026-107889 A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible...

  • CVE-2026-94257

    🚨 CVE-2026-94257 The SMS Alert WordPress plugin before 4.0.3 does not bind the account whose password is being changed to the phone number that...

  • CVE-2026-115448

    🚨 CVE-2026-115448 Uncontrolled recursion in Apache ZooKeeper. The server serializes its data tree to a snapshot by recursing one stack frame per...

  • CVE-2026-103112

    🚨 CVE-2026-103112 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because...

  • CVE-2026-107123

    🚨 CVE-2026-107123 A flaw was found in the SAML XML processing component of Keycloak, an open-source identity and access management solution. The...

  • CVE-2026-107602

    🚨 CVE-2026-107602 A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution. The...

Статистика статей

Статьи
53,084
Просмотры
239,652
Защита от мошенничества: Использование посредника минимизирует риски столкнуться с «продавцами-однодневками» или недобросовестными заказчиками, которые исчезают после получения предоплаты или результата работы.
Назад
Сверху