Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the keycloak-services component of Keycloak. This issue is an incomplete fix for CVE-2026-9798, where brute-force protection checks were added to the Client-Initiated Backchannel Authentication (CIBA) initiation handler but were omitted from the token redemption handler. This allows an attacker with valid client credentials to obtain access and refresh tokens for a user account that has been locked due to brute-force protection, provided the authentication request was started before the lockout occurred and was approved by the user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
⚠️ Linux Red Hat Build of Keycloak alert: CVE-2026-16103 (CVSS 4.3) Attackers could affect the listed product. Apply the vendor-recommended mitigation. https://vulnipulse.com/advisories/linux-cve-2026-16103 #Linux #CyberSecurity #CVE
Post summary
The advisory warns of CVE-2026-16103 affecting Red Hat Keycloak and recommends applying vendor mitigation, without mentioning any PoC, exploit, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |