Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. An administrator with limited client management permissions can exploit this vulnerability to assign any realm role, including highly privileged roles, to a client's scope mapping. This bypasses intended security controls, allowing the injected role to be projected into a user's authentication token when they access the modified client. This could lead to unauthorized privilege escalation within the Keycloak realm.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-06-03 | 1 | Disclosure1 |
| 2026-06-29 | 1 | General1 |
| 2026-07-02 | 2 | Disclosure1Patch1 |
CVE-2026-9795 is a good patch-discipline check. Affected systems / privilege escalation. Public details are enough to start scoping. What would you check first if this hit your stack?
Post summary
The text briefly references CVE-2026-9795 as a privilege escalation risk, urging consideration of patch status, but provides no concrete details or evidence of exploitation.
Keycloak 26.6.4 fixes CVE-2026-9795 (High) — privilege escalation via improper scope mapping lets a limited admin inject any realm role into user tokens. Also patches auth bypass and UMA ticket abuse. Upgrade if you run Keycloak FGAPv2. #OpenSource #DevSecOps https://www.keycloak.org/2026/06/keycloak-2664-released
Post summary
Keycloak 26.6.4 patch addresses CVE-2026-9795, a high‑severity privilege escalation flaw, and also covers authentication bypass and UMA ticket abuse; users are urged to upgrade immediately.
🔴 Keycloak (#Red Hat Build), Privilege Escalation via Scope Mapping, #CVE-2026-9795 (HIGH) -DC-Jul2026-824 https://dailycve.com/keycloak-red-hat-build-privilege-escalation-via-scope-mapping-cve-2026-9795-high-dc-jul2026-824/
Post summary
A new CVE-2026-9795 has been disclosed, describing a high-severity privilege escalation vulnerability in Keycloak through scope mapping.
🔴 Keycloak, Privilege Escalation, #CVE-2026-9795 (Critical) -DC-Jun2026-160 https://dailycve.com/keycloak-privilege-escalation-cve-2026-9795-critical-dc-jun2026-160/
Post summary
A new Keycloak privilege escalation vulnerability (CVE-2026‑9795) is being disclosed as critical, with no additional technical, exploit, or mitigation details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |