MikeTrendsTrends right now
AI: reposAPI

search

Keycloak

Trends

  1. 1
    Keycloak Kerberos flaw lets network attackers hijack accounts●CVE-2026-95503 Keycloak Kerberos auth bypass, CVSS 6.8. Unpatched. Same-network attacker can spoof the KDC and take overMmastodonTechnologyCybersecurity09 h ago

    A newly disclosed vulnerability, CVE-2026-95503, affects Keycloak's Kerberos authentication and carries a CVSS score of 6.8. It remains unpatched. An attacker on the same network can spoof the Kerberos Key Distribution Center and take over user accounts. Security commentators urge administrators to isolate Kerberos traffic or stop using password authentication without SPNEGO protection until a fix is released.