Vulnerabilities (CVE)

Filtered by CWE-551
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-0707 2026-01-08 N/A 5.3 MEDIUM
A flaw was found in Keycloak. The Keycloak Authorization header parser is overly permissive regarding the formatting of the "Bearer" authentication scheme. It accepts non-standard characters (such as tabs) as separators and tolerates case variations that deviate from RFC 6750 specifications.