{"id":"EM-20261106-4K2Q","url":"https://cyber.eventmonitor.net/incident/EM-20261106-4K2Q/dynamic-client-registration-vulnerability-cve-2026-96547/","type":"cve","title":"Dynamic Client Registration Vulnerability (CVE-2026-96547)","subtitle":"CVE-2026-96547","subject":"CVE-2026-96547","status":"Developing","severity":"medium","affected":[],"headline":null,"born":"2026-11-06T06:30:23.000Z","firstSignal":"2026-11-05T00:00:00.000Z","lastSignal":"2026-11-06T06:30:23.000Z","updated":"2026-11-06T07:34:48.209Z","revision":1,"life":[{"status":"Born","at":"2026-11-06T06:30:23.000Z","why":"second independent source: C29 CIRCL Vulnerability-Lookup"},{"status":"Developing","at":"2026-11-06T06:30:23.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-05T00:00:00.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-06T06:30:23.000Z","what":"Born: second source, C29 CIRCL Vulnerability-Lookup. Page EM-20261106-4K2Q created."}],"stages":[{"name":"Disclosed","at":"2026-11-06T06:16:45.220Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-06T06:16:45.220Z","detail":"CVSS 6.5"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-05T00:00:00.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-05T00:00:00.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":2,"title":"Red Hat: CVE-2026-96547 (moderate)","text":"keycloak-services: keycloak-services: DCR registration-time claim-path gap allows forging realm_access.roles","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-96547.json"},{"at":"2026-11-06T06:30:23.000Z","source":"C29","sourceName":"CIRCL Vulnerability-Lookup","role":"Database","severity":2,"title":"GHSA-x8ch-fp9w-fgvx / CVE-2026-96547","text":"A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration…","url":"https://vulnerability.circl.lu/vuln/GHSA-x8ch-fp9w-fgvx"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-06T06:16:45.220","score":6.5,"severity":"MEDIUM","desc":"A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution. The issue occurs because the system does not properly restrict which claim names can be used when setting up new clients. An attacker with valid registration…","product":"","seen":1793950488209},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}