Skip to content

CVE-2026-18571

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
October 13, 2026
Last Seen
October 13, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Keycloak Admin API Vulnerabilities Expose User Management Risks57.0

Two vulnerabilities in Keycloak's Admin REST API have been disclosed, affecting user management functionalities. CVE-2026-94000 allows a delegated administrator to gain full administrative control by improperly adding users to groups that confer elevated roles without adequate checks. CVE-2026-94001...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Privilege EscalationCVE-2026-94000CWE-269 - Improper Privilege ManagementT1068 - Exploitation for Privilege Escalation