← All advisoriesLow severity3.1NVD Advisory· Published Apr 13, 2026keycloak: keycloak: acceptable AAGUID policy bypass via packed self-attestation in WebAuthn registrationCVE-2026-6856Descriptionkeycloak: keycloak: acceptable AAGUID policy bypass via packed self-attestation in WebAuthn registrationAffected products1Keycloak/Keycloakllm-fuzzyPatchesVulnerability mechanicsNews mentions0No linked articles in our index yet.