CVE-2026-15571

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC client. By tricking a user into authenticating, an attacker-controlled client can forge a valid linking URL to connect the victim's account to an attacker's external identity. This results in a full account takeover, allowing the attacker to log in as the victim.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-341

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

Antonela E. Arenas@teffyantonelita1d
Vulnerabilidades de Keycloak solo en lo que va de 2026 CVE-2026-18963 (Crítica - CVSS 9.1): Permite a atacantes no autenticados tomar el control de cualquier cuenta (incluyendo administradores) forzando el restablecimiento de contraseña sin requerir el enlace de verificación por correo electrónico. CVE-2026-15571 (Alta - CVSS 7.3): Uso de un hash predecible en el flujo de vinculación de cuentas heredado, permitiendo la apropiación de cuentas mediante un cliente OIDC malicioso.
00010217
2.4K followersView on X

Explore more

Back to dashboard