Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
RISING
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-09 | 1 | Patch1 |
| 2026-03-11 | 1 | Patch1 |
| 2026-03-18 | 4 | Disclosure2General2 |
| 2026-04-09 | 1 | General1 |
| 2026-06-02 | 1 | Disclosure1 |
CVE-2026-2092 Keycloak: Unauthorized access via improper validation of encrypted SAML assertions https://github.com/keycloak/keycloak/security/advisories/GHSA-794g-x443-36f7
Post summary
The advisory announces a Keycloak vulnerability that allows unauthorized access due to improper SAML assertion validation, but no proof‑of‑concept, exploit, or mitigation details are provided.
CVE Alert: CVE-2026-2092 - Red Hat - Red Hat build of Keycloak 26.2 - https://www.redpacketsecurity.com/cve-alert-cve-2026-2092-red-hat-red-hat-build-of-keycloak-26-2/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-2092 #red-hat #red-hat-build-of-keycloak-26-2
Post summary
A brief CVE alert announcing CVE‑2026‑2092 affecting Red Hat’s Keycloak 26.2 build, linking to a website for further details.
Unauthorized access via improper validation of encrypted SAML assertions affects `Keycloak` (CVE-2026-2092). Monitor official channels for patch availability. #Keycloak #SAML #AuthBypass https://www.pulsepatch.io/posts/cve-2026-2092-keycloak-saml-auth-bypass
Post summary
The tweet reports that Keycloak CVE‑2026‑2092 enables unauthorized access via improper validation of encrypted SAML assertions and advises users to monitor for an upcoming patch, with no PoC, exploit, or active exploitation mentioned.
⚡ New CVE Alert: CVE-2026-2092 📊 Severity: 7.7 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-2092 #CVE-2026-2092 #CVE #High #CyberSecurity #InfoSec https://t.co/rq02q5431D
Post summary
The tweet provides a brief alert and a link to the NVD entry, but lacks any technical detail, exploitation evidence, or remediation guidance.
CVE-2026-2092 A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML… https://www.cve.org/CVERecord?id=CVE-2026-2092
Post summary
Keycloak's SAML broker endpoint fails to properly validate encrypted assertions, indicating a potential security vulnerability.
CVE-2026-2092 SAML Assertion Injection Vulnerability in Keycloak Authentication ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2092 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
CVE-2026-2092 is described as a SAML assertion injection flaw in Keycloak Authentication, yet the post offers no PoC, exploit details, patch information, or evidence of active exploitation.
Keycloak、危険な脆弱性を含む4件を修正(CVE-2026-3047、CVE-2026-3009、CVE-2026-2603、CVE-2026-2092) https://rocket-boys.co.jp/security-measures-lab/keycloak-fixes-4-flaws-including-critical-cve-2026-3047-3009-2603-2092/ #セキュリティ対策Lab #セキュリティ #Security #CybersecurityNews
Post summary
The post announces that Keycloak has released patches for four CVEs, including a critical one, with no mention of proof of concept, exploit, or active attacks.
Keycloakで4件のSecurity fix CVE-2026-3047 CVE-2026-3009 CVE-2026-2603 CVE-2026-2092 Keycloak 26.5.5 released https://www.keycloak.org/2026/03/keycloak-2655-released
Post summary
Keycloak released version 26.5.5, which contains security fixes for four CVEs.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |