Cloud-IAM (@cloud_iam_com) header
Cloud-IAM (@cloud_iam_com) profile picture

Cloud-IAM

@cloud_iam_com

A fully managed Keycloak solution with 99.95% SLA, ISO 27001 certification, 24/7 expert support — all hosted in Europe to ensure compliance and data sovereignty

 Internet
cloud-iam.com/
Joined July 2019
  • Tweets289
  • Following27
  • Followers220
106Media
Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)Photo by Cloud-IAM (@cloud_iam_com)
Keycloak 26.8.2 fixes 17 high or critical CVEs, making it the biggest security release of the year.
Image from Cloud-IAM (@cloud_iam_com)
1
2
9
more replies
their owner from these claims and treated the attacker's token as the administrator's, giving them full control of the realm. CVE-2026-96457 (High, no score yet): In realms using Fine-Grained Admin Permissions v2 and delegating group management to admins other than realm ⬇️
1
2
7
admins, an attacker with a delegated admin account allowed to manage at least one group could move this group to get around DENY rules set on subgroups, and therefore manage sensitive groups to get admin access to the realm.
2
3
Load more