CVEFinder.io

CVE-2026-14209

🔶 medium
🔍 Scan for this CVE
Summary

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrato

Description

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path.

CVSS Score
4.3
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-06-30
First Seen: 2026-07-01
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 5.4% of all 338,292 vulnerabilities in our database.

#320,047
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jun 30, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Red Hat would like to thank Jinyeong Yang for reporting this issue.
SSVC data provided by CISA
Last Modified 2026-07-01
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE IDs (Weakness Types)
CWE-639

📦 Affected Products 2

Vendor Product Status Affected Versions
redhat jboss_enterprise_application_platform_expansion_pack Affected
v-
redhat build_of_keycloak Affected
v-

🔗 References 2

https://access.redhat.com/security/cve/CVE-2026-14209
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2494837
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-12388 🔶 medium 6.5 0.2 A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user informati... 2026-06-30
CVE-2026-4629 🔶 medium 6.5 0.2 A flaw was found in Keycloak. A highly privileged user with `manage-clients` permission can exploit this vulnerability b... 2026-06-30
CVE-2026-9083 🔶 medium 4.9 0.5 A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submi... 2026-06-25
CVE-2026-9086 ⚠️ high 7.3 0.4 A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` ... 2026-06-25
CVE-2026-9099 ⚠️ high 7.7 0.3 A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin RE... 2026-06-25
CVE-2026-9705 🔶 medium 6.5 0.3 A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registrati... 2026-06-25
These CVEs affect the same products