Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Keycloak. A remote attacker with high privileges, such as a realm administrator configuring a malicious Lightweight Directory Access Protocol (LDAP) server or an attacker compromising an upstream LDAP server, could exploit this vulnerability. By sending a malformed LDAP password policy response during a password authentication request, the attacker can trigger an OutOfMemoryError. This causes the Keycloak Java Virtual Machine (JVM) to terminate, leading to a denial of service (DoS) for all realms on the affected node.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
🟠 Keycloak (#Red Hat Build), Denial-of-Service (DoS), #CVE-2026-9801 (Medium) -DC-Jun2026-176 https://dailycve.com/keycloak-red-hat-build-denial-of-service-dos-cve-2026-9801-medium-dc-jun2026-176/
Post summary
The post announces the discovery of CVE‑2026‑9801, a Medium‑severity Denial‑of‑Service vulnerability affecting Keycloak from Red Hat Build, with basic technical details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | build_of_keycloak | - | - | - |