THREAT OPS › Threat News › [NVD] CVE-2026-2366 (LOW 3.1) — A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated user, even those without administrative privileges, to enumerate the organization memberships of other users. This information disclosure occurs if the attacker
[NVD] CVE-2026-2366 (LOW 3.1) — A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated user, even those without administrative privileges, to enumerate the organization memberships of other users. This information disclosure occurs if the attacker
CVE-2026-2366 CVSS: 3.1 LOW Published: 2026-03-12T11:15:55.860
A flaw was found in Keycloak. An authorization bypass vulnerability in the Keycloak Admin API allows any authenticated user, even those without administrative privileges, to enumerate the organization memberships of other users. This information disclosure occurs if the attacker knows the victim's unique identifier (UUID) and the Orga
Indicators of compromise
- CVE-2026-2366cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-2366