PULSE
LIVE62signals / 24h
ES
FEED
ransomclop reclama a ipm******* · Not Foundransomclop reclama a ecc******* · Not Foundransomclop reclama a st******* · Not Foundransomclop reclama a qc******* · Not Foundransomclop reclama a flu******* · Not Foundransomclop reclama a mid******* · Not Foundransomclop reclama a itk******* · Not Foundransomclop reclama a G3A******* · Not Foundransomclop reclama a arc******* · Technologyransomclop reclama a omn******* · Not Foundransomclop reclama a lif******* · Not Foundransomclop reclama a sp******* · Not Foundransomclop reclama a iva******* · Not Foundransomclop reclama a nuo******* · Not Foundransomclop reclama a ipm******* · Not Foundransomclop reclama a ecc******* · Not Foundransomclop reclama a st******* · Not Foundransomclop reclama a qc******* · Not Foundransomclop reclama a flu******* · Not Foundransomclop reclama a mid******* · Not Foundransomclop reclama a itk******* · Not Foundransomclop reclama a G3A******* · Not Foundransomclop reclama a arc******* · Technologyransomclop reclama a omn******* · Not Foundransomclop reclama a lif******* · Not Foundransomclop reclama a sp******* · Not Foundransomclop reclama a iva******* · Not Foundransomclop reclama a nuo******* · Not Found
← All CVEs
CVE WatchAug 5, 2026

CVE-2026-16100

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from faile

CVSS

6.5

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Aug 5, 2026 · Last modified: Aug 5, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated user can create a massive number of unique metric entries, eventually exhausting system memory and causing the service to crash or become unavailable.

Official references
Related CVEs

No related CVEs by CWE or product.