CVE-2026-94217

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 21, 2026

Last Seen

October 13, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Multiple Vulnerabilities Disclosed in Keycloak 26.8.1 Release60.6

Keycloak's latest release, version 26.8.1, addresses several vulnerabilities, including CVE-2026-15943, which allows a bypass of secret masking for OIDC identity-provider client secrets. This flaw can be exploited by a delegated IdP manager to link a malicious endpoint to a real secret. Another issu...

Keycloak Vulnerabilities CVE-2026-94213 and CVE-2026-94217 Disclosed51.0

Two vulnerabilities in Keycloak, an open-source identity and access management solution, were disclosed on September 21, 2026. CVE-2026-94213 is a medium-severity flaw in the Authorization Services component, allowing delegated administrators to access sensitive user information due to missing autho...