CVE-2026-18572

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description Keycloak authorization services allow administrators to restrict resource access using time policies. A flaw exists where a user can include a fake time value within an authorization request to override the server time, enabling the bypass of time-based restrictions to access protected resources at unauthorized times.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.