{"id":"CVE-2026-95503","aliases":[],"cve":{"records":[{"id":"CVE-2026-95503","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T06:42:35.840Z","published":"2026-09-22T07:43:29.532Z","modified":"2026-11-06T10:27:10.501Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-06T10:27:10.501Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-09-22T14:36:35.259Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:95761","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-95503","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2537744","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"}],"weaknesses":[{"id":"CWE-347","description":"Improper Verification of Cryptographic Signature","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-09-22T14:35:49.382587Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Keycloak-services: keycloak-services: potential kdc spoofing bypass when kerberos password authentication is enabled","titleSource":"redhat","descriptionSource":"redhat","description":"A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center (KDC) by requesting a server ticket. This allows an attacker on the same network to spoof the KDC and bypass the authentication process, potentially gaining unauthorized access to user accounts.","score":6.8,"severity":"medium","published":"2026-09-22T07:43:29.532Z","modified":"2026-11-06T10:27:10.501Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat build of Keycloak 26.6.8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:build_keycloak:26.6::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"},{"vendor":"Red Hat","name":"Red Hat build of Keycloak 26.6.8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:build_keycloak:26.6::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"},{"vendor":"Red Hat","name":"Red Hat build of Keycloak 26.6.8","platforms":[],"versions":[],"defaultStatus":"unaffected","cpes":["cpe:/a:redhat:build_keycloak:26.6::el9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"},{"vendor":"Red Hat","name":"Red Hat Single Sign-On 7","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"}],"remediation":[{"text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"}],"references":["https://access.redhat.com/errata/RHSA-2026:95761","https://access.redhat.com/security/cve/CVE-2026-95503","https://bugzilla.redhat.com/show_bug.cgi?id=2537744"],"sources":[{"name":"CVE","id":"CVE-2026-95503","modified":"2026-11-06T10:27:10.501Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","score":6.8}],"sourceAffected":[],"observedAt":"2026-11-06T10:51:42.139Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:55:31.093Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T13:25:34.738Z","attemptedAt":"2026-11-06T13:25:34.738Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-06T13:25:34.729Z","attemptedAt":"2026-11-06T13:25:34.729Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T13:25:34.986Z","attemptedAt":"2026-11-06T13:25:34.986Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-06T13:25:34.721Z","attemptedAt":"2026-11-06T13:25:34.721Z"}],"evidence":[{"source":"GitHub Advisory Database","id":"GHSA-35j3-ccrv-pgvj","url":"https://github.com/advisories/GHSA-35j3-ccrv-pgvj","modified":"2026-11-06T12:31:35Z","score":6.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-06T13:25:34.729Z"},{"source":"FIRST EPSS","id":"CVE-2026-95503","url":"https://www.first.org/epss/","probability":0.00192,"percentile":0.08985,"date":"2026-11-05","checkedAt":"2026-11-06T13:25:34.721Z"},{"source":"NVD","id":"CVE-2026-95503","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95503","modified":"2026-11-06T11:17:22.340","score":6.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-06T13:25:34.738Z"},{"source":"ENISA EUVD","id":"EUVD-2026-84288","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84288","modified":"Nov 6, 2026, 10:27:10 AM","score":6.8,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","checkedAt":"2026-11-06T13:25:34.986Z"}],"aiSummary":{"text":"Keycloak has a potential KDC spoofing bypass when Kerberos password authentication is enabled without SPNEGO, allowing an attacker on the same network to bypass authentication. The affected product is Red Hat Single Sign-On 7. An attacker must have network access to exploit this weakness.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-06T11:01:06.330Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95503"}]}}