CLEANSTART-2026-OE38729: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Q: What does an attacker need to exploit this issue?

The supplied CVSS vector indicates that it is remotely reachable over the network and requires no privileges or user interaction, but exploitation has high attack complexity.

Q: What is the expected security impact if exploitation succeeds?

The supplied severity data indicates a high confidentiality impact, with no stated integrity or availability impact.

Q: Can this advisory identify whether a specific Keycloak deployment is affected?

No. The provided data identifies cleanstart/keycloak and references MariaDB Connector/J, but does not provide affected versions, fixed versions, configuration conditions, or detection guidance.

Published Nov 5, 2026

Updated

Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases.

Affected Software

1 affected componentFixes available

cleanstart/keycloak<26.8.1-r1

26.8.1-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/keycloak to a version that resolves this vulnerability.
Fixed in 26.8.1-r1

Event History

Nov 5, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-119210

Frequently Asked Questions

What does an attacker need to exploit this issue?

The supplied CVSS vector indicates that it is remotely reachable over the network and requires no privileges or user interaction, but exploitation has high attack complexity.

What is the expected security impact if exploitation succeeds?

The supplied severity data indicates a high confidentiality impact, with no stated integrity or availability impact.

Can this advisory identify whether a specific Keycloak deployment is affected?

No. The provided data identifies cleanstart/keycloak and references MariaDB Connector/J, but does not provide affected versions, fixed versions, configuration conditions, or detection guidance.

CLEANSTART-2026-OE38729: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

Can this advisory identify whether a specific Keycloak deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

Can this advisory identify whether a specific Keycloak deployment is affected?