Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating the `client_session_host` parameter during refresh token requests. This occurs when a Keycloak client is configured to use the `backchannel.logout.url` with the `application.session.host` placeholder. Successful exploitation allows the attacker to make HTTP requests from the Keycloak server’s network context, potentially probing internal networks or internal APIs, leading to information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 4 products
CVE-2026-4874 A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating the `client_session_host` parameter during refres… https://www.cve.org/CVERecord?id=CVE-2026-4874
Post summary
Keycloak is vulnerable to an authenticated SSRF via manipulation of the client_session_host parameter, as reported in CVE-2026-4874; no PoC, exploit, or patch is mentioned.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |
| App | redhat | jboss_enterprise_application_platform | 8.0.0 | - | - |
| App | redhat | jboss_enterprise_application_platform_expansion_pack | - | - | - |
| App | redhat | single_sign-on | 7.0 | - | - |