Important: Keycloak security update
Type/Severity
NetEye Product Security has rated this update as having a high security impact.
Topic
An update for the keycloak packages is now available for NetEye 4.
Security Fix for NetEye 4.48
26.6.2_neteye1.40.0-1
Summary
This vulnerability allows an attacker with a valid signed SAML assertion to inject a malicious encrypted assertion into an unsigned SAML response, resulting in user impersonation and unauthorized access.
For details on how to apply this update, which includes the changes described in this advisory, refer to the NetEye Update Section in the User Guide.
Affected Products
All NetEye 4.x versions >= 4.38.
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://github.com/keycloak/keycloak/security/advisories/GHSA-794g-x443-36f7
Gabriele Bocchi
Software Engineer - IT System & Service Management Solutions at Würth IT Italy
Author
Latest posts by Gabriele Bocchi
27. 03. 2026
Automation, Development, DevOps, NetEye
From Private to Public: Building a Secure GitHub Organization
18. 12. 2025
Automation, Development, NetEye
From Patch to Package: How a Small Fix Becomes a Trusted RPM
30. 09. 2025
Automation, Development, DevOps
How to Set Up Safe, Automatic Dependency Updates in Your Projects