CVE-2026-100599

CVE

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

September 26, 2026

Last Seen

September 26, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in Keycloak CVE-2026-97846 Exposes Token Security52.5

A vulnerability identified as CVE-2026-97846 in Keycloak's Standard Token Exchange V2 feature allows attackers with stolen client credentials to bypass mTLS holder-of-key binding protections. This flaw enables the acquisition of unrestricted Bearer tokens, potentially leading to unauthorized access...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerability in Keycloak CVE-2026-97846 Exposes Token Security

4h ago·5 sources

Related Articles (1)

CVE-2026-97846 AKAOMA CVE VULNERABILITIES / 20h Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by binding it to their digital certificate. A flaw was discovered where the new Standard Token Exchange V2 feature does not check for this certificate. This allows an attacker with stolen client credentials to obtain a standard, unrestricted token that bypasses these security protections.

cve.akaoma.com·4h ago

Related Entities

Data Breach CVE-2026-100596 CVE-2026-100597 CVE-2026-100598 CVE-2026-15273 CVE-2026-97846 CWE-287 - Improper Authentication T1078 - Valid Accounts Keycloak