Skip to content

CVE record · 1 source

CVE-2026-109082

CVSS 6.8

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.

Vendor: Red Hat
Product: Keycloak / Single Sign-On, Java libraries / app servers, Open-source identity providers
CVSS: 6.8
Exposure class: Identity, Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 20d ago

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak.

A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authentication flows where a client initiates a login on…

CVSS 6.8 CVE-2026-109082 Red Hat