Skip to content

CVE-2026-110931

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 6, 2026
Last Seen
November 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical vulnerability, CVE-2026-117691, was disclosed in Keycloak on November 5, 2026, allowing attackers to bypass SAML HTTP-Redirect signature verification. This flaw enables full account takeover of federated users by processing percent-encoded parameter names incorrectly. Organizations using...

Public Exploits

Checking GitHub for proof-of-concept code…