CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.3. See the original NVD description below for full technical details.
CVE
CVE-2026-3872
Severity
HIGH
CVSS
7.3
EPSS
0.44%
Original NVD Description
A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information disclosure.
Related CVEs
Other vulnerabilities affecting the same vendor(s)