Beveiligingsadvies

CVE-2026-0707

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-08 03:41:27
Laatst bijgewerkt 2026-06-08 10:21:07
Toegewezen door redhat
CVSS-score 5.3
Status PUBLISHED

Beschrijving

A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.