CVE WatchJul 15, 2026

CVE-2026-9800

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, includi

CVSS

8.1

High

EPSS

0.3%

p22

KEV

—

Exploit Today

0-100

Published: Jun 25, 2026 · Last modified: Jul 15, 2026 · CWE-1025

EPSS · 30d

0.3%EPSS · 30 days0.3%

2026-06-302026-07-16

Technical description

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-71377—

—

——0stoatchat (delta) versions before 20250210-1 (0.8.2) contain a logic error in the query messages route. When fetching messages 'nearby' another message, the database query can be given a message limit of zero, which the database interprets as 'no limit'. A remote unauthenticated attacker can craft nearby message fetch requests to download an entire channel's message history in a single expensive request, and can send many such requests in parallel, resulting in denial of service through resource exhaustion.11h