CVE-2026-97175 - Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover
CVE ID :CVE-2026-97175 Published : Nov. 5, 2026, 6:17 p.m. | 51 minutes ago Description :A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity federation. The issue occurs when Keycloak automatically links an incoming identity from...