Exploited: 178
LatestCVE-2026-115732 — Certificate Name Authorization Bypass
VulnFeed.org
AREN

org.keycloak:keycloak-services vulnerabilities and fixes

Exploited and high-severity org.keycloak:keycloak-services vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.1CVE-2026-11800Keycloak has authentication bypass via jwt algorithm confusionFix availableorg.keycloak:keycloak-services
    1 min read
  2. 7.3CVE-2026-9086Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypassRCEFix availableorg.keycloak:keycloak-services
    1 min read
  3. 8.1CVE-2026-9800Keycloak vulnerable to authorization bypass via incorrect uri comparisonFix availableorg.keycloak:keycloak-services
    1 min read
Esc