CVE-2026-16108

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 31, 2026

Last Seen

August 31, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Keycloak Vulnerabilities Expose Sensitive Data and Admin Roles57.8

Two critical vulnerabilities were identified in Keycloak, affecting its REST API. CVE-2026-16108 allows unauthorized visibility of hidden default groups by delegated administrators, risking exposure of sensitive organizational structures. CVE-2026-16105 enables attackers to degrade permissions of ot...