CVE-2026-4633

वीकनेस

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration.

प्रभावित प्रोडक्ट

• redhat build_of_keycloak

संदर्भ

• https://access.redhat.com/security/cve/CVE-2026-4633
• https://bugzilla.redhat.com/show_bug.cgi?id=2450247