CVE-2026-9099 · Brief

CVEs like CVE-2026-9099

The records whose text reads closest to CVE-2026-9099, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-940000.837
   Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership

   Same vendor or product family, Red.

2. CVE-2026-97960.734
   Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability

   Same vendor or product family, Red.

3. CVE-2026-123880.722
   Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider…

   Same vendor or product family, Red.

4. CVE-2025-77840.816
   Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)

   Same vendor or product family, Red.

5. CVE-2026-411660.679
   OpenRemote has Improper Access Control via updateUserRealmRoles function

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2026-175260.758
   Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm…

   Same vendor or product family, Red.

7. CVE-2026-46290.739
   Keycloak: keycloak: privilege escalation through hardcoded role mapper injection

   Same vendor or product family, Red.

8. CVE-2026-964480.790
   Keycloak-services: keycloak-services: fgap v2 composite-blind role mapping allows privilege escalation

   Related weakness classes, CWE-285 is above CWE-639; same vendor or product family, Red.

9. CVE-2026-31210.753
   Keycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permission

   Same vendor or product family, Red.

10. CVE-2026-97950.790
    Keycloak: keycloak: privilege escalation via improper scope mapping enforcement

    Same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.