CVE-2026-118425 | Red Hat Keycloak/Single Sign-On Secure Redirect URIs Enforcer Client Policy improper authorization

October 29, 2026 Yanac

A vulnerability described as critical has been identified in Red Hat Keycloak and Single Sign-On. This impacts an unknown function of the component Secure Redirect URIs Enforcer Client Policy. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-118425. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More