Emerging threat check · CVE-2026-41187 · published Today, 06:40 · checked Today, 07:05
CVE-2026-41187 · Keycloak 24.0.0 to 24.0.4 lets anyone sign in as another user through a forged token
On auth.smileidentity.com. None of your own 29 hosts do. We matched the version we fingerprinted on each host; nothing was attacked to find out.
46 hosts, yours and your vendors'
Matched against the technology and version each host showed in its last scan