CVE-2026-2092CWE-1287

CVE-2026-2092

High · published March 18, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. This allows the attacker to inject an encrypted assertion for an arbitrary principal, leading to unauthorized access and potential information disclosure.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00374 · 30.2th percentile
Weakness
CWE-1287 · Improper Validation of Specified Type of Input
Published
2026-03-18T06:16Z
Affected products (2)
ProductVersionsFixed in
redhat/build_of_keycloak≥ 26.2, < 26.2.1426.2.14
redhat/build_of_keycloak≥ 26.4, < 26.4.1026.4.10
References (18)
https://access.redhat.com/errata/RHSA-2026:76128 · [email protected]https://access.redhat.com/errata/RHSA-2026:76129 · [email protected]https://access.redhat.com/errata/RHSA-2026:76130 · [email protected]https://access.redhat.com/errata/RHSA-2026:76132 · [email protected]https://access.redhat.com/errata/RHSA-2026:76134 · [email protected]https://access.redhat.com/security/cve/CVE-2026-2092 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2437296 · [email protected]https://access.redhat.com/errata/RHSA-2026:3925 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:3926 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:3947 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:3948 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/security/cve/CVE-2026-2092 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://bugzilla.redhat.com/show_bug.cgi?id=2437296 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2092.json · 0b0ca135-0b70-47e7-9f44-1890c2a1c46chttps://access.redhat.com/errata/RHSA-2026:3925 · [email protected]https://access.redhat.com/errata/RHSA-2026:3926 · [email protected]https://access.redhat.com/errata/RHSA-2026:3947 · [email protected]https://access.redhat.com/errata/RHSA-2026:3948 · [email protected]
EPSS history
Timeline
  • 18 MAR 01:14Z
    Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions
    cvelistv5