CVE-2026-4629 · Brief

CVEs like CVE-2026-4629

The records whose text reads closest to CVE-2026-4629, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-123880.872
   Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider…

   Same weakness class, CWE-266; same vendor or product family, Red.

2. CVE-2026-155720.771
   Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation

   Same vendor or product family, Red.

3. CVE-2020-143890.691
   It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2026-97950.872
   Keycloak: keycloak: privilege escalation via improper scope mapping enforcement

   Same weakness class, CWE-266; same vendor or product family, Red.

5. CVE-2020-17250.721
   A flaw was found in keycloak before version 13.0.0.

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2026-97960.782
   Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability

   Same vendor or product family, Red.

7. CVE-2026-411660.705
   OpenRemote has Improper Access Control via updateUserRealmRoles function

   Related weakness classes, CWE-284 is above CWE-266.

8. CVE-2026-824610.744
   pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Token

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

9. CVE-2026-964480.769
   Keycloak-services: keycloak-services: fgap v2 composite-blind role mapping allows privilege escalation

   Same vendor or product family, Red.

10. CVE-2021-41330.687
    A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.