CVE-2026-96446 | Red Hat Keycloak Single Sign-On Pushed Authorization Request PAR Implementation improper authorization

September 23, 2026 Yanac

A vulnerability classified as critical was found in Red Hat Keycloak Single Sign-On. Affected by this issue is some unknown functionality of the component Pushed Authorization Request PAR Implementation. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-96446. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More