Keycloak 26.4.0 <= 26.8.0 令牌自检受众绕过 (CVE-2026-105306)

medium Nessus 插件 ID 363811

版本 1.2

Oct 8, 2026, 7:54 AM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "False")
  • Exploit attributes ("Exploitability ease" set to "No known exploits are available")

Plugin Feed: 202610080754