[Git][security-tracker-team/security-tracker][master] Add new keycloak issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
13270a18 by Salvatore Bonaccorso at 2026-05-20T09:27:35+02:00
Add new keycloak issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,7 +7,7 @@ CVE-2026-9010 (The Boost plugin for WordPress is vulnerable to time-based SQL In
 CVE-2026-9003 (E-LAN Hybrid Recording System developed by TONNET has a SQL Injection  ...)
 	TODO: check
 CVE-2026-8922 (A flaw was found in Keycloak. When both realm-level and client-level ` ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-8912 (The Contest Gallery plugin for WordPress is vulnerable to SQL Injectio ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-8827 (The AddressRepository::getSqlQuery() method constructs a database quer ...)
@@ -69,13 +69,13 @@ CVE-2026-7860 (A possible information disclosure vulnerability exists in the Vaa
 CVE-2026-7637 (The Boost plugin for WordPress is vulnerable to PHP Object Injection i ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7571 (A flaw was found in Keycloak. A low-privilege user, with knowledge of  ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-7522 (The Advanced Database Cleaner \u2013 Premium plugin for WordPress is v ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7507 (A session fixation vulnerability was found in Keycloak's login-actions ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-7504 (A flaw was found in Keycloak's URL validation logic during redirect op ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-7472 (The Read More & Accordion plugin for WordPress is vulnerable to time-b ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7467 (The Read More & Accordion plugin for WordPress is vulnerable to Privil ...)
@@ -87,7 +87,7 @@ CVE-2026-7460 (mailcow-dockerized contains a stored cross-site scripting vulnera
 CVE-2026-7385 (The Decent Comments WordPress plugin before 3.0.2 does not restrict ac ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-7307 (A flaw was found in Keycloak. A remote, unauthenticated attacker can s ...)
-	TODO: check
+	- keycloak <itp> (bug #1088287)
 CVE-2026-7284 (The Easy Elements for Elementor \u2013 Addons & Website Templates plug ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-6871 (Improper Neutralization of Input During Web Page Generation ("Cross-si ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13270a18178d10cea60d08984b8dc6b888f8fc39

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/13270a18178d10cea60d08984b8dc6b888f8fc39
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260520/51b69d4c/attachment.htm>