CVE-2026-114232 - Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access
CVE ID :CVE-2026-114232 Published : Nov. 5, 2026, 4:05 p.m. | 1 hour, 3 minutes ago Description :A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages user permissions, fails to validate the resourceType field when a...