Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

Keycloak view-clients role allows retrieval of active client secrets via installation provider endpoints (CVE-2026-107604)

bugzilla.redhat.com 2026-10-09 查看中文 →

Referenced CVEs: CVE-2026-107604 · 4.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from bugzilla.redhat.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Keycloak OIDC Dynamic Client Registration Session Persistence Bypass via Missing Field in Response (CVE-2026-107623) 2026-10-09 luksmeta: LUKS1 metadata allocator gap-boundary/overlap checks flaw causes data corruption 2026-10-09 OpenShift insights-operator Excessive Cluster-Wide Secret Access Privilege Escalation (CVE-2026-93017) 2026-10-09 CVE-2026-107466: flatpak-builder Local File Exfiltration via file:// URI 2026-10-08 Katello Flatpak Remote Repositories API Cross-Organization Authorization Bypass (CVE-2026-107445) 2026-10-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro