Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely different organization could gain access to the Keycloak realm, potentially accessing sensitive data or performing unauthorized actions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-18215 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this re… https://www.cve.org/CVERecord?id=CVE-2026-18215
Post summary
The tweet references a new Keycloak vulnerability involving Microsoft account login restrictions, but provides no evidence of a PoC, exploitation, patch, or detailed technical analysis.
🚨*CVE* CVE-2026-18215 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this re… https://www.cve.org/CVERecord?id=CVE-2026-18215 ----- Traducción: CVE-2026-18215 Key… http://infoflow.cloud`
Post summary
The post announces a Keycloak flaw that permits Microsoft account logins with tenant restrictions, offering a brief technical explanation but no exploit, PoC, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |