VulnSocial

CVE-2026-16108General(redhat / build_of_keycloak)

LOWCVSS 6.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch redhat build_of_keycloak systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and identifiers of hidden default groups, even if they lack the specific permissions to view those groups. This can lead to the exposure of sensitive organizational structures or internal group names.

redhat CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1220CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • build_of_keycloak

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-17); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
redhat
Products
build_of_keycloak

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-17: 1Mentions · 2026-07-20: 1PoC Mentioned / Linked · 2026-07-17: 1Patch / Workaround · 2026-07-20: 1Technical Details · 2026-07-17: 1Technical Details · 2026-07-20: 107-1707-20
Signal classification2 categories
General
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-171
General1
2026-07-201
Patch1
Full discourse2 posts
  • ExploitGrid@exploitgrid
    General

    Critical CVEs today: CVE-2026-15343 (GitHub Enterprise path traversal via Dependabot), CVE-2026-16108 (Keycloak group/perm leak), CVE-2026-51083 (Proxmox VE hash exposure), CVE-2026-15380 (Symantec SYSTEM code exec). Full breakdowns on ExploitGrid http://exploitgrid.net #CVE

    Post summary

    The post lists several critical CVEs with brief technical descriptions and points readers to ExploitGrid for more detailed breakdowns, without indicating active exploitation or available patches.

    0001080
    26 followersView on X
  • VulniPulse@vulnipulse
    Patch

    ⚠️ Linux Red Hat Build of Keycloak alert: CVE-2026-16108 (CVSS 4.3) Attackers could affect the listed product. Apply the vendor-recommended mitigation. https://vulnipulse.com/advisories/linux-cve-2026-16108 #Linux #CyberSecurity #CVE

    Post summary

    The alert announces CVE-2026‑16108 for the Linux Red Hat Build of Keycloak, provides its CVSS score, and urges users to apply the vendor-recommended mitigation.

    0000035
    6 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appredhatbuild_of_keycloak---

Explore more

Back to dashboardredhat CVEsbuild_of_keycloak vulnerabilities