Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. When a client is configured with a wildcard redirect URI, an attacker can use this to inject duplicate security parameters into the login response. If a client application is not configured correctly, it might trust the attacker's injected data instead of the real security information from Keycloak, leading to session fixation or account confusion.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-18209 A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check… https://www.cve.org/CVERecord?id=CVE-2026-18209
Post summary
CVE-2026-18209 has been disclosed as a flaw in Keycloak's keycloak‑services component that impacts OpenID Connect authentication flows.
🚨*CVE* CVE-2026-18209 A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check… https://www.cve.org/CVERecord?id=CVE-2026-18209 ----- Traducción: Se encontró una fa… http://infoflow.cloud`
Post summary
The tweet simply announces that CVE‑2026‑18209, a flaw in Keycloak’s OIDC authentication component, has been identified, with no further details on exploitation, patching, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |