← All advisoriesImportant severity7.3NVD Advisory· Published Jun 25, 2026keycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypassCVE-2026-9086Descriptionkeycloak: Keycloak: Cross-site scripting (XSS) via case-insensitive URI validation bypassAffected products1Keycloak/Keycloakllm-fuzzyPatchesVulnerability mechanicsNews mentions0No linked articles in our index yet.