Tag

jwt-validation

Articles tagged with jwt-validation.

security

Apache CXF CVE-2026-50627: JWT Audience Checks for Keycloak APIs

CVE-2026-50627 let Apache CXF skip the JWT audience claim check. Here is what every resource server must validate on Keycloak…

Guilliano MolaireGuilliano Molaire12 min read
security

CVE-2026-5430: WSO2 JWT Bypass and Your Keycloak APIs

CVE-2026-5430 let forged JWTs past WSO2 API Manager authentication. Here is how you pin algorithms and fail closed on APIs…

Guilliano MolaireGuilliano Molaire12 min read

Stay ahead on identity & security

Get tutorials, product updates, and Keycloak tips delivered to your inbox.

Book a demoTalk to Sales
© 2026 Skycloak. All Rights Reserved. Design by Yasser SolimanKeycloak™ is a trademark of the Linux Foundation. Skycloak is not affiliated with the Keycloak project.