CVE•Published 2026-03-18•Modified 2026-08-18•1 article on news•5 live references•NVD data
CVE-2026-2603Redhat · Build_of_keycloak
Vulnerability data via NVD (ingested)
CVSS v3.1
8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS percentile
34
Exploit Prediction Scoring System · top 66% of all CVEs
Weaknesses (CWE)
Description
A flaw was found in Keycloak. A remote attacker could bypass security controls by sending a valid SAML response from an external Identity Provider (IdP) to the Keycloak SAML endpoint for IdP-initiated broker logins. This allows the attacker to complete broker logins even when the SAML Identity Provider is disabled, leading to unauthorized authentication.
Timeline
Published 2026-03-18
Modified 2026-08-18
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2026-2603Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · product
product:"Redhat Build Of Keycloak"All exposed Redhat Build Of Keycloak instances — cross-reference with the CVE's affected-version range.
Shodan · banner/body mention
http.html:"Build Of Keycloak"HTTP body or banner mentions "Build Of Keycloak" — catches deploys Shodan didn't identify as a product.
More intel sources (5)
Shodan report
vuln:CVE-2026-2603Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-2603Censys host search filtered to this CVE id.
grep.app
CVE-2026-2603Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-2603GitHub code search for direct mentions.
Google dork
"CVE-2026-2603" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-26038 repos
aliasrobotics/caiPython
Cybersecurity AI (CAI), the framework for AI Security
Tencent/AI-Infra-GuardPython
A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
DeepXiv/deepxiv_sdkPython
Talk to research papers like talking to authors - Python package with AI agent for arXiv papers
anmolksachan/AI-ML-Free-Resources-for-Security-and-Prompt-Injectionunknown
AI/ML Pentesting Roadmap for Beginners
oliver-kriska/claude-elixir-phoenixPython
Claude Code plugin for Elixir/Phoenix/LiveView — 26 specialist agents, Iron Laws enforcement, and Tidewave MCP integration. Plan features with parallel research agents, execute wit…
Zijian-Ni/awesome-ai-agents-2026Python
🤖 A curated list of AI Agent frameworks, tools, platforms, and resources for 2026 — the year agents went mainstream
MihaiCiprianChezan/Agentic-First-Enterprisesunknown
A reference operating model for organizations where any role can be filled by a human or an agent, every process is built for agents first, and every flow can be paused, adjusted b…
jnMetaCode/shellwardTypeScript
AI 应用合规网关 · 一行命令体检 AI 项目的「数据出境 / 硬编码密钥 / 个人信息暴露」（网安法·PIPL·等保2.0·数据出境·AI标识），并给出境内模型替代建议；可作运行时防护拦截注入与数据外泄 · 中文优先 · 零依赖 · 开源