CVE-2026-18572General(redhat / build_of_keycloak)

LOWCVSS 6.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). A flaw was discovered where a user can include a fake time value in their authorization request that overrides the actual server time. This allows the user to bypass these time-based restrictions and access protected resources at unauthorized times.

redhat CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

build_of_keycloak

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
General: 2 classified signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Affected systems

Vendors

redhat

Products

build_of_keycloak

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud45d
General
🚨*CVE* CVE-2026-18572 Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during bu… https://www.cve.org/CVERecord?id=CVE-2026-18572 ----- Traducción: CVE-2026-18572 Key… http://infoflow.cloud`
Post summary
The post merely references CVE-2026-18572 and provides a link, without additional technical detail or actionable information.
0000047
96 followersView on X
CVE@CVEnew45d
General
CVE-2026-18572 Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during bu… https://www.cve.org/CVERecord?id=CVE-2026-18572
Post summary
The text references CVE-2026-18572 and provides a brief technical description in the context of Keycloak’s time‑based authorization but offers no proof of concept, exploit, or patch details.
00000681
57.9K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-18572 Time-Based Authorization Bypass in Keycloak via Fake Time Value Injection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-18572
Post summary
The report announces a time‑based authorization bypass in Keycloak caused by fake time injection, providing technical details but lacking claims of exploitation, PoC, or patch information.
00000104
4.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	redhat	build_of_keycloak	-	-	-

Explore more

Back to dashboard redhat CVEs build_of_keycloak vulnerabilities