CybersecurityVERIFIED NOV 2026
Keycloak SAML signature bypass exposes federated accounts to takeover
CVE-2026-117691 can allow unauthorised login as federated Keycloak users. Community users should move to Keycloak 26.8.2, while Red Hat-supported estates should prepare for an erratum and assess exposure now.