CVE-2026-17526
7.2 HIGHPublished 2026-09-16 · Updated 2026-09-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full administrative control over the realm, including the ability to manage users, clients, and roles.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-862
References
Data: NVD (public domain). Analysis: local $0 model. Defensive use only.