Tag

delegated-admin

Articles tagged with delegated-admin.

security

CVE-2026-96448: Keycloak FGAP Composite Privilege Escalation

CVE-2026-96448 is a Keycloak privilege escalation: an FGAP v2 delegated admin assigns a composite role that hides realm-admin. How it…

Guilliano MolaireGuilliano Molaire11 min read
security

CVE-2026-97177: Keycloak Delegated Admin Account Takeover

CVE-2026-97177 enables account takeover in Keycloak: a delegated admin denied reset-password can still set passwords via user update. How it…

Guilliano MolaireGuilliano Molaire9 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

Start Free TrialTalk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.