generalvia Exploit-DB (latest)
[webapps] Keycloak 26.7.2 - Unauthenticated Account Takeover
Keycloak 26.7.2 - Unauthenticated Account Takeover
Oct 21, 2026 UTC
Stories are collected automatically from public feeds, attributed to their original publishers and linked. Editors can remove anything. Always read the original source.
Keycloak 26.7.2 - Unauthenticated Account Takeover
Automotive Shop Management System 1.0 - SQLi
Edimax BR-6478AC firmware v2.20 - authenticated command injection
Exasol Database 7.1.30 - command execution
Parasoft Continuous Testing Platform 10.7.5 - JSP command execution
ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root
Teltonika_RutOS 00.07.06.21 - command injection
TigerGraph_Community_Edition 4.2.4 - arbitrary file write
WordPress 7.0.2 - Path Travesal
Food-Ordering 1.0 - LFI
Krayin CRM 2.2.4 - IDOR
SuiteCRM 8.10.1 - Authenticated SSRF