CVE-2026-4630

A flaw was found in Keycloak. An authenticated client could exploit an Insecure Direct Object Reference (IDOR) vulnerability in the Authorization Services Protection API endpoint. By knowing or obtaining a resource's unique identifier (UUID) belonging to another Resource Server within the same realm, the client could bypass authorization checks. This allows the client to perform unauthorized GET, PUT, and DELETE operations on resources, leading to information disclosure and potential unauthorized modification or deletion of data.

• CWE-639

• https://access.redhat.com/errata/RHSA-2026:19596Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:19597Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2026-4630Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2450245Vendor Advisory

Published

May 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-46294In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46295In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46296In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46297In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46298In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-46299In the Linux kernel, the following vulnerability has been re…7
• CVE-2026-46300In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46301In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46302In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46303In the Linux kernel, the following vulnerability has been re…8.2
• CVE-2026-46304In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-46305In the Linux kernel, the following vulnerability has been re…5.5