CVE-2026-94001 · Brief

CVEs like CVE-2026-94001

The records whose text reads closest to CVE-2026-94001, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-971770.871
   Keycloak-services: keycloak-services: generic user update bypasses denied reset-password permission

   Same weakness class, CWE-862 (missing authorization); same vendor or product family, Red.

2. CVE-2016-86290.794
   Red Hat Keycloak before version 2.4.0 did not correctly check permissions when handling service account user deletion…

   Related weakness classes, CWE-284 is above CWE-862; same vendor or product family, Red.

3. CVE-2026-189630.723
   Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

   Same vendor or product family, Red.

4. CVE-2026-161060.799
   Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin…

   Same vendor or product family, Red.

5. CVE-2026-146140.695
   Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource

   Same vendor or product family, Red.

6. CVE-2026-648660.728
   New API: Admin can reset passkeys for same-level or higher-privileged users

   Same weakness class, CWE-862 (missing authorization).

7. CVE-2020-17250.718
   A flaw was found in keycloak before version 13.0.0.

   Sibling weakness classes under CWE-285, CWE-862 and CWE-863.

8. CVE-2021-41330.759
   A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user…

   Sibling weakness classes under CWE-285, CWE-862 and CWE-863.

9. CVE-2019-148320.761
   A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user…

   Sibling weakness classes under CWE-285, CWE-862 and CWE-863.

10. CVE-2020-17180.744
    A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0.

    Same vendor or product family, Red.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,235 records. Fetched 2026-10-31.