Medium 1 vendor · 1 advisory

CVE-2026-40948

Unified cross-vendor view: this CVE is referenced by 1 tracked vendor. Each vendor rates and fixes it independently — confirm the impact for your specific products below.

NVD detail CVE.org

Apache1 advisory

Medium5.4The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0…Apr 18, 2026

CVE-2026-40948 — medium severity, 1 vendor affected · VulniPulse