Keycloak (Micrometer): Schwachstelle ermöglicht Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Lowbsi:WID-SEC-2026-36141 linked CVE
Open advisory with all CVEs
More on Micrometer
Other advisories
- LowCVE-2026-101333Keycloak (Micrometer): Schwachstelle ermöglicht Denial of Service
- Not ratedosv:ROOT-APP-MAVEN-CVE-2026-40984CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root
- Not ratedosv:CLEANSTART-2026-EH73552In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
- Not ratedosv:CLEANSTART-2026-IK01159In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition
- Not ratedosv:CLEANSTART-2026-PS96430It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak
- Not ratedosv:CLEANSTART-2026-TF24136In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition
- Not ratedosv:CLEANSTART-2026-PD84248In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
- Not ratedosv:CLSA-2026-1793119973TuxCare security update for io.micrometer (2 CVEs)
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3614
ID