{"id":"CVE-2026-118959","aliases":[],"cve":{"records":[{"id":"CVE-2026-118959","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T08:18:57.879Z","published":"2026-10-30T00:15:31.611Z","modified":"2026-10-30T00:15:31.611Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-10-30T00:15:31.611Z"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-118959","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2563288","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-287","description":"Improper Authentication","source":"redhat"}],"applicability":[],"prioritization":[]},"title":"Keycloak-services: keycloak-services: required actions bypassed via kc_action parameter","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in the required action provider mechanism of Keycloak. The issue occurs when an authorization request includes the kc_action query parameter set to a mandatory action already assigned to the user, such as profile verification or terms and conditions. Due to incorrect handling of application-initiated actions, Keycloak may skip these mandatory challenges and issue an authorization code. This can allow a user to bypass administrative requirements and gain access to the application without completing necessary profile updates or agreeing to terms.","score":5.4,"severity":"medium","published":"2026-10-30T00:15:31.611Z","modified":"2026-10-30T00:15:31.611Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Build of Keycloak","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:build_keycloak:"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"},{"vendor":"Red Hat","name":"Red Hat Build of Keycloak","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:build_keycloak:"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"},{"vendor":"Red Hat","name":"Red Hat Single Sign-On 7","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"}],"remediation":[{"text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"}],"references":["https://access.redhat.com/security/cve/CVE-2026-118959","https://bugzilla.redhat.com/show_bug.cgi?id=2563288"],"sources":[{"name":"CVE","id":"CVE-2026-118959","modified":"2026-10-30T00:15:31.611Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","score":5.4}],"sourceAffected":[],"observedAt":"2026-10-30T02:46:55.989Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T04:25:30.910Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T03:10:35.025Z","attemptedAt":"2026-10-30T03:10:35.025Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T03:10:35.651Z","attemptedAt":"2026-10-30T03:10:35.651Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-30T03:10:35.710Z","attemptedAt":"2026-10-30T03:10:35.710Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T03:10:35.433Z","attemptedAt":"2026-10-30T03:10:35.433Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-118959","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118959","modified":"2026-10-30T01:16:44.630","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","checkedAt":"2026-10-30T03:10:35.025Z"},{"source":"ENISA EUVD","id":"EUVD-2026-113443","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113443","modified":"Oct 30, 2026, 12:15:31 AM","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","checkedAt":"2026-10-30T03:10:35.710Z"}],"aiSummary":{"text":"A flaw in Keycloak's required action provider mechanism allows users to bypass mandatory challenges, such as profile verification, by including the kc_action query parameter in an authorization request. This can grant access to the application without completing necessary profile updates. The affected product is Red Hat Build of Keycloak.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:19:25.830Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-118959"}]}}