THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-15943 (MEDIUM 5.5) — A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak re

[NVD] CVE-2026-15943 (MEDIUM 5.5) — A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak re

mednvdPublished 2026-07-17

CVE-2026-15943 CVSS: 5.5 MEDIUM Published: 2026-07-17T12:17:03.313

A flaw was found in the Keycloak keycloak-services component, which handles the management of identity providers. The issue occurs when a delegated administrator updates an OIDC identity provider using a masked client secret sentinel value. Due to improper validation, Keycloak reuses the existing real secret even if security-sensi

Indicators of compromise

CVE-2026-15943cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-15943