CVE-2026-9088 · Brief

CVEs like CVE-2026-9088

The records whose text reads closest to CVE-2026-9088, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-379810.769
   Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint

   Same weakness class, CWE-1220; same vendor or product family, Red.

2. CVE-2026-23660.770
   Keycloak: keycloak: information disclosure via authorization bypass in admin api

   Same vendor or product family, Red.

3. CVE-2026-379780.691
   Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api

   Same vendor or product family, Red.

4. CVE-2026-31900.708
   Keycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection api

   Same vendor or product family, Red.

5. CVE-2026-170590.764
   Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter

   Same vendor or product family, Red.

6. CVE-2026-146130.769
   Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without…

   Same weakness class, CWE-1220; same vendor or product family, Red.

7. CVE-2019-148320.675
   A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user…

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

8. CVE-2026-146150.778
   Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter

   Same weakness class, CWE-1220; same vendor or product family, Red.

9. CVE-2025-140820.687
   Keycloak-services: keycloak admin rest api: improper access control leads to sensitive role metadata information…

   Related weakness classes, CWE-284 is above CWE-1220; same vendor or product family, Red.

10. CVE-2026-39110.785
    Org.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via…

    Same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.