Medium4.3Red Hat Linux Updated

keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions

CVE-2026-14209 Published Jun 30, 2026Updated by vendor Jun 30, 2026

CVE-2026-14209

Affected products & platforms

Red Hat LinuxUnclassified

Summary

keycloak-admin-ui:Admin UI extension brute-force-user endpoint bypasses FGAPv2 user view restrictions. Red Hat rates this moderate (CVSS 4.3). Weakness: CWE-639.

Mitigation checklist

Recommended fix / mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.