Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Keycloak Admin REST API Cross-Tenant Authorization Bypass (CVE-2026-94215)

bugzilla.redhat.com 2026-09-21 查看中文 →

Referenced CVEs: CVE-2026-94215 · 5.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from bugzilla.redhat.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Keycloak CVE-2026-93999 Missing Authorization in Token Refresh Flow 2026-09-19 Keycloak CVE-2026-94000: Privilege Escalation to Realm-Admin via Group Membership 2026-09-19 Keycloak CVE-2026-94001 Missing Authorization Flaw: Admin API Bypass via FGAP 2026-09-19 OpenShift Console CVE-2026-75858: Unauthenticated SSRF & Resource Exhaustion 2026-09-19 Netty HTTP Request Smuggling via Chunk-Size Whitespace (CVE-2026-93574) 2026-09-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro