Veille CVE

Mercredi 5 août 2026

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Prometheus prometheus » ✕
  1. CVE-2026-16100 6.5 Moyenne

    Red Hat build of Keycloak 26.6 · Red Hat build of Keycloak 26.6.5 · Red Hat Data Grid 8 · Red Hat JBoss Enterprise Application Platform Expansion Pack

    A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations as Prometheus metric labels. Because these error messages can include user-supplied input like nonexistent client IDs, an authenticated user can create a massive number of unique metric entries, eventually exhausting system memory and causing the service to crash or become unavailable.