Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys, when they are requested by administrators with view-only permissions. This can lead to the exposure of third-party service credentials to unauthorized personnel or through administrative logs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
⚠️ Linux Red Hat Build of Keycloak alert: CVE-2026-16104 (CVSS 4.3) Attackers could affect the listed product. Apply the vendor-recommended mitigation. https://vulnipulse.com/advisories/linux-cve-2026-16104 #Linux #CyberSecurity #CVE
Post summary
The advisory announces CVE-2026-16104 with CVSS 4.3, warns of potential impact, and directs users to apply vendor‑recommended mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |