CVE-2026-9689

redhat build of keycloak

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-9689

Katalog CVE

CVSS 4.2 · Medium EPSS 0,43%

Kerentanan Improper Validation of Consistency within Input pada redhat build of keycloak. Skor CVSS 3.1 4.2 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in Keycloak, an open-source identity and access management solution. When a client application is configured to accept broad redirect Uniform Resource Identifiers (URIs), a remote attacker can manipulate the authentication process by crafting a special web address. If a user clicks this link, the client application might incorrectly prioritize attacker-controlled information over legitimate data. This vulnerability, known as HTTP parameter pollution, could allow an attacker to bypass security measures or gain unauthorized access to resources.

Rincian

Terbit di NVD
27 Mei 2026
Terakhir diubah
20 Agustus 2026
Status NVD
Modified
CVSS 3.1
4.2 (Medium), sumber redhat.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1288: Improper Validation of Consistency within Input
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 35,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
redhat build of keycloak Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.