CVE-2026-117691

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 6, 2026

Last Seen

November 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Keycloak Vulnerability CVE-2026-117691 Enables Account Takeover72.6

A critical vulnerability, CVE-2026-117691, was disclosed in Keycloak on November 5, 2026, allowing attackers to bypass SAML HTTP-Redirect signature verification. This flaw enables full account takeover of federated users by processing percent-encoded parameter names incorrectly. Organizations using...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Keycloak Vulnerability CVE-2026-117691 Enables Account Takeover

1d ago·9 sources

Related Entities

Data Breach Denial Of Service (DoS)Zero-day Exploit Account Takeover Cross-Site Scripting (xss)Red Hat CVE-2026-103112 CVE-2026-105305 CVE-2026-107123 CVE-2026-107124 CVE-2026-107602 CVE-2026-107623

CVE-2026-117691

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Keycloak Vulnerability CVE-2026-117691 Enables Account Takeover

Related Articles (4)

CERT Santé: Red Hat — CVE-2026-117691, November 6, 2026

Red Hat: CVE-2026-117691

Keycloak: 26.8.2 released, November 5, 2026

Keycloak CVE-2026-117691: SAML Signature Bypass Enables Federated Account Takeover

Related Entities