CVE-2026-1190 | Red Hat Keycloak SAML Brokering SubjectConfirmationData privilege escalation

January 19, 2026 Yanac

A vulnerability has been found in Red Hat Keycloak and classified as critical. This affects the function SubjectConfirmationData of the component SAML Brokering. The manipulation leads to privilege escalation.

This vulnerability is referenced as CVE-2026-1190. The attack needs to be initiated within the local network. No exploit is available.VulDB Recent EntriesRead More