World Wires · story 110055 · official · 1 source(s)

Keycloak SAML HTTP-Redirect signature bypass vulnerability

A critical flaw in Keycloak's SAML HTTP-Redirect implementation allows attackers to bypass signature verification using percent-encoded parameter names.

Open in the desk

Coverage

• Keycloak SAML HTTP-Redirect signature bypass vulnerability NVD: critical CVEs · tier A · clear net · 2026-11-05 14:17 UTC

What this site indexes