Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resource identifiers owned by other users in a policy creation request, even if the URL path specifies an attacker-owned resource. Consequently, the attacker gains unauthorized permissions to victim-owned resources, enabling them to obtain a Requesting Party Token (RPT) and access sensitive information or perform unauthorized actions.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 1 product
CVE-2026-3429, CVE-2026-4636 and others in Keycloak Several vulnerabilities in Keycloak allow attackers to bypass MFA, steal access tokens, and access confidential user data. 👉 https://nt.ls/Ooqi1 (https://nt.ls/Ooqi1)
Post summary
The post announces several Keycloak CVEs that enable MFA bypass, token theft, and access to confidential data, without referencing patches, PoCs, or active exploitation.
🟠 CVE-2026-4636 - High A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resource identifier... https://www.thehackerwire.com/vulnerability/CVE-2026-4636/ https://t.co/B0Bk4Iqw9Y
Post summary
Keycloak UMA policy bypass is disclosed, allowing authenticated users with a specific role to evade policy checks; no PoC, exploit, or patch mentioned.
CVE-2026-4636 A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to inc… https://www.cve.org/CVERecord?id=CVE-2026-4636
Post summary
The article discloses a Keycloak flaw that lets authenticated users with the uma_protection role bypass UMA policy validation, potentially enabling privilege escalation, but no PoC, exploit code, or patch is mentioned.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |
| App | redhat | build_of_keycloak | 26.2 | - | - |
| App | redhat | build_of_keycloak | 26.2.15 | - | - |
| App | redhat | build_of_keycloak | 26.4 | - | - |
| App | redhat | build_of_keycloak | 26.4.11 | - | - |