CVE-2026-1518
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. After further review by the Keycloak project and Red Hat, the reported SSRF via client re
CVSS
—
Sin CVSS
EPSS
0.2%
p15
KEV
—
Exploit Today
4
0-100
Publicado: 2 feb 2026 · Última mod.: 24 jul 2026
Sin historial EPSS suficiente todavía.
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. After further review by the Keycloak project and Red Hat, the reported SSRF via client registration/backchannel notification URIs was determined not to constitute a security vulnerability. The reported behavior is expected administrator-controlled functionality, and Keycloak provides documented mitigations through Client Policies, including the Secure Client URIs Pattern executor. Therefore, this CVE has been rejected.
Sin CVEs relacionados por CWE o producto.