CVE-2026-117691 - Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names
CVE ID :CVE-2026-117691 Published : Nov. 5, 2026, 2:17 p.m. | 51 minutes ago Description :A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak. The issue occurs because the server processes percent-encoded parameter names (like %53AMLResponse) while the signature...