CVE-2026-14209

MEDIUM 4.3

Published 2026-06-30 · Last modified 2026-07-13

A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass security restrictions. When Fine-Grained Admin Permissions (FGAPv2) are enabled, an administrator who should only be able to search for users (but not view their full details) can use a specific "brute-force-user" endpoint to access a user's full profile. This includes sensitive information and security metadata. The issue occurs because the system fails to check if the administrator has the required "view" permission for that specific user when using this particular search path.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 7th percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

4.3CVSS 3.1 · MEDIUM

ConfidentialityLow
IntegrityNone
AvailabilityNone

What an attacker needs

✓Access: Reachable over the network — no local access needed
⚠Privileges: Requires a low-privilege account
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

github-search Search GitHub for public PoC repos

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-14209/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-14209/poc.json

Affected

Vendors Red Hat Redhat

Products Red Hat Build Of Keycloak Red Hat Jboss Enterprise Application Platform Expansion Pack Build Of Keycloak Jboss Enterprise Application Platform Expansion Pack

Weakness (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Known Affected Software Configurations

Vendor	Product	Version range
Redhat	Build Of Keycloak	*
Redhat	Jboss Enterprise Application Platform Expansion Pack	*

All CVSS metrics

MEDIUM 4.3 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
MEDIUM 4.3 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References

Advisories

https://access.redhat.com/security/cve/CVE-2026-14209 vdb-entryx_refsource_REDHATVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2494837 issue-trackingx_refsource_REDHATVendor Advisory

Sources: NVD · CVE.org · EPSS