CVE-2026-118959 | Red Hat Keycloak/Single Sign-On Required Action Provider kc_action improper authorization

A vulnerability, which was classified as critical, was found in Red Hat Keycloak and Single Sign-On. This impacts an unknown function of the component Required Action Provider. Such manipulation of the argument kc_action leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-118959. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More