CVE-2026-8922— Keycloak 安全漏洞
Possible ATT&CK Techniques 2AI
T1528 · Steal Application Access Token T1550 · Use Alternate Authentication MaterialAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Red Hat | Red Hat build of Keycloak 26.4 | 26.4.13-1< * | unaffected |
26.4-19< * | unaffected | ||
26.4-19< * | unaffected | ||
| Red Hat | Red Hat build of Keycloak 26.4.13 | any | unaffected |
| Red Hat | Red Hat build of Keycloak 26.6 | 26.6.3-3< * | unaffected |
26.6-6< * | unaffected | ||
26.6-6< * | unaffected | ||
| Red Hat | Red Hat build of Keycloak 26.6.3 | any | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-8922の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services
ソース: NVD (National Vulnerability Database)
脆弱性説明
A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies are configured, Keycloak's OpenID Connect (OIDC) Introspection feature fails to properly honor the realm-level policy. This allows tokens that should have been revoked to remain active, potentially leading to unauthorized access or continued session validity. This could impact the security of systems utilizing Keycloak for identity and access management.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
认证算法的不正确实现
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Keycloak 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Keycloak是Keycloak开源的一种开源身份和访问管理解决方案。 Keycloak存在安全漏洞，该漏洞源于OIDC内省功能未正确应用领域级notBefore策略，可能导致已撤销令牌仍有效。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Red Hat | Red Hat build of Keycloak 26.4 | 26.4.13-1 ~ * | cpe:/a:redhat:build_keycloak:26.4::el9 | |
| Red Hat | Red Hat build of Keycloak 26.4 | 26.4-19 ~ * | cpe:/a:redhat:build_keycloak:26.4::el9 | |
| Red Hat | Red Hat build of Keycloak 26.4 | 26.4-19 ~ * | cpe:/a:redhat:build_keycloak:26.4::el9 | |
| Red Hat | Red Hat build of Keycloak 26.4.13 | - | cpe:/a:redhat:build_keycloak:26.4::el9 | |
| Red Hat | Red Hat build of Keycloak 26.6 | 26.6.3-3 ~ * | cpe:/a:redhat:build_keycloak:26.6::el9 | |
| Red Hat | Red Hat build of Keycloak 26.6 | 26.6-6 ~ * | cpe:/a:redhat:build_keycloak:26.6::el9 | |
| Red Hat | Red Hat build of Keycloak 26.6 | 26.6-6 ~ * | cpe:/a:redhat:build_keycloak:26.6::el9 | |
| Red Hat | Red Hat build of Keycloak 26.6.3 | - | cpe:/a:redhat:build_keycloak:26.6::el9 |
II. CVE-2026-8922の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-8922のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-8922 厂商安全公告 (4)
CVE-2026-8922 其他参考 (2)
Same Patch Batch · Red Hat · 2026-05-19 · 11 CVEs total
| CVE-2026-7504 | 8.1 HIGH | Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in k |
| CVE-2026-7307 | 7.5 HIGH | Keycloak: keycloak: denial of service via specially crafted saml input |
| CVE-2026-7507 | 7.5 HIGH | Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to accou |
| CVE-2026-7571 | 7.1 HIGH | Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client dat |
| CVE-2026-4630 | 6.8 MEDIUM | Keycloak: keycloak: unauthorized resource access and data modification via insecure direct |
| CVE-2026-37982 | 6.8 MEDIUM | Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauth |
| CVE-2026-37979 | 6.5 MEDIUM | Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience |
| CVE-2026-37978 | 4.9 MEDIUM | Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admi |
| CVE-2026-8830 | 4.3 MEDIUM | Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credenti |
| CVE-2026-37981 | 4.3 MEDIUM | Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access c |
IV. 関連脆弱性
- CVE-2026-9083
Keycloak: keycloak: information disclosure through arbitrary - CVE-2026-9799
Keycloak: keycloak: unauthorized access to resources via uma - CVE-2026-9705
Keycloak: keycloak: attacker can re-enable and take over dis - CVE-2026-9086
Keycloak: keycloak: cross-site scripting (xss) via case-inse - CVE-2026-9099
Keycloak: group-admin escalation to realm-admin
同じベンダー: Red Hat
- CVE-2026-16118
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse - CVE-2026-16104
Keycloak-services: keycloak-services: authenticator config e - CVE-2026-16103
Keycloak-services: keycloak-services: incomplete fix for cib - CVE-2026-16106
Keycloak-services: keycloak-services: incorrect authorizatio - CVE-2026-16108
Keycloak-services: keycloak-services: realm default-group re
同じ弱点: CWE-303
- CVE-2026-47300
ASP.NET Core Elevation of Privilege Vulnerability - CVE-2026-50360
Windows SMB Server Elevation of Privilege Vulnerability - CVE-2026-41053
Over-inclusive team membership expansion in GitHub App authe - CVE-2026-41103
Microsoft SSO Plugin for Jira & Confluence Elevation of Priv - CVE-2026-43640
Bitwarden Server < 2026.4.1 Authentication Bypass via SCIM A
V. CVE-2026-8922へのコメント
まだコメントはありません