CVE-2026-94001

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 13, 2026

Last Seen

October 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Vulnerabilities Disclosed in Keycloak 26.8.1 Release60.6

Keycloak's latest release, version 26.8.1, addresses several vulnerabilities, including CVE-2026-15943, which allows a bypass of secret masking for OIDC identity-provider client secrets. This flaw can be exploited by a delegated IdP manager to link a malicious endpoint to a real secret. Another issu...

Keycloak Admin API Vulnerabilities Expose User Management Risks57.0

Two vulnerabilities in Keycloak's Admin REST API have been disclosed, affecting user management functionalities. CVE-2026-94000 allows a delegated administrator to gain full administrative control by improperly adding users to groups that confer elevated roles without adequate checks. CVE-2026-94001...