Keycloak vulnerable to authorization bypass via incorrect uri comparison
CVE-2026-9800
### Description A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass
#cwe-1025
共收录 10 条相关情报。
← 返回所有主题A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing o...
CVE-2026-104048
A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (H
A logic flaw in Java cache key handling object comparison handling could lead to improper...
CVE-2026-14441
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when pro
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for ...
CVE-2026-79677
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allo
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2/leases/{lease_id} and DELETE /v2/lea...
CVE-2026-93854
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge because totp_use_recovery compares user identifiers numerical...
CVE-2026-78619
Punk::Plugin::TOTP versions before 0.05 for Perl accept another account's recovery code at the two-factor challenge beca
ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforcement, which uses unescaped regular expressions to validat...
CVE-2026-75840
ArcadeDB before 26.8.1 contains an arbitrary file read vulnerability in the GraalVM JavaScript sandbox allowlist enforce
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can b...
CVE-2025-71377
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching me
stoatchat before 20250210-1 Unrestricted Message History Fetch
CVE-2025-71377
stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching me
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Acce...
CVE-2026-9800
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorizati