No description is available for this CVE.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Redhat Subscribe
Build Keycloak Subscribe

No data.

Package CPE Advisory Released Date
Red Hat build of Keycloak 26.2
rhbk/keycloak-operator-bundle:26.2.14-1 cpe:/a:redhat:build_keycloak:26.2::el9 RHSA-2026:3925 2026-03-05T00:00:00Z
rhbk/keycloak-rhel9:26.2-16 cpe:/a:redhat:build_keycloak:26.2::el9 RHSA-2026:3925 2026-03-05T00:00:00Z
rhbk/keycloak-rhel9-operator:26.2-16 cpe:/a:redhat:build_keycloak:26.2::el9 RHSA-2026:3925 2026-03-05T00:00:00Z
Red Hat build of Keycloak 26.2.14
rhbk/keycloak-rhel9 cpe:/a:redhat:build_keycloak:26.2::el9 RHSA-2026:3926 2026-03-05T00:00:00Z
Red Hat build of Keycloak 26.4
keycloak-rhel9-container-26.4-12 cpe:/a:redhat:build_keycloak:26.4::el9 RHSA-2026:3948 2026-03-05T00:00:00Z
keycloak-rhel9-operator-bundle-container-26.4.10-1 cpe:/a:redhat:build_keycloak:26.4::el9 RHSA-2026:3948 2026-03-05T00:00:00Z
keycloak-rhel9-operator-container-26.4-12 cpe:/a:redhat:build_keycloak:26.4::el9 RHSA-2026:3948 2026-03-05T00:00:00Z
Red Hat build of Keycloak 26.4.10
rhbk/keycloak-rhel9 cpe:/a:redhat:build_keycloak:26.4::el9 RHSA-2026:3947 2026-03-05T00:00:00Z

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://nvd.nist.gov/vuln/detail/CVE-2026-2092 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-2092 cve-icon
History

Fri, 06 Mar 2026 00:15:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE.
Title keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions
First Time appeared Redhat
Redhat build Keycloak
Weaknesses CWE-1287
CPEs cpe:/a:redhat:build_keycloak:26.2::el9
cpe:/a:redhat:build_keycloak:26.4::el9
Vendors & Products Redhat
Redhat build Keycloak
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L'}

threat_severity

Important

Projects

Sign in to view the affected projects.

cve-icon MITRE

No data.

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-03-05T12:34:00Z

Links: CVE-2026-2092 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses