VULNERABILITY INTELLIGENCE

CVE-2026-2603

CVSS score8.1 HIGH
EPSS probability0.44%
CISA KEVNot currently listed
Published2026-03-18
Last modified2026-08-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication.

Weakness classification

  • secalert@redhat.com: CWE-306
  • 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-306

Primary references