VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 5, 2026· Updated Jul 15, 2026

CVE-2026-3047

CVE-2026-3047

Description

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language (SAML) client is configured as an Identity Provider (IdP)-initiated broker landing target, it can still complete the login process and establish a Single Sign-On (SSO) session. This allows a remote attacker to gain unauthorized access to other enabled clients without re-authentication, effectively bypassing security restrictions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.keycloak:keycloak-broker-samlMaven
<= 1.8.1.Final—

Affected products

9
  • Red Hat/Red Hat build of Keycloak 26.2.14v5
    cpe:/a:redhat:build_keycloak:26.2::el9
  • Red Hat/Red Hat build of Keycloak 26.4.10v5
    cpe:/a:redhat:build_keycloak:26.4::el9
  • Red Hat/Build Of Keycloak5 versions
    cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*+ 4 more
    • cpe:2.3:a:redhat:build_of_keycloak:-:*:*:*:text-only:*:*:*
    • cpe:2.3:a:redhat:build_of_keycloak:26.2.14:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:build_of_keycloak:26.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:build_of_keycloak:26.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:build_of_keycloak:26.4:*:*:*:*:*:*:*
  • Red Hat/Keycloak
    cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.keycloak/keycloak-broker-saml
    Range: <= 1.8.1.Final

Patches

Vulnerability mechanics

References

10

News mentions

0

No linked articles in our index yet.