CVE-2026-9800

HIGH

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.

CVSS v3.1 Score

8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Published: 6/25/2026Modified: 7/2/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-9800 — A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any auth...

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied page path within a request URL, either as a path segment or a query parameter, an attacker can gain unauthorized access to protected resources.

CVE-2026-9800
NIST NVD

References (13)

https://access.redhat.com/errata/RHSA-2026:30049Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30050Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30083Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30084Vendor Advisoryhttps://access.redhat.com/security/cve/CVE-2026-9800Vendor Advisoryhttps://bugzilla.redhat.com/show_bug.cgi?id=2482472Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30049Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30050Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30083Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:30084Vendor Advisoryhttps://access.redhat.com/security/cve/CVE-2026-9800Vendor Advisoryhttps://bugzilla.redhat.com/show_bug.cgi?id=2482472Vendor Advisoryhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9800.jsonVendor Advisory