CVE-2026-1529

This repository contains a functional exploit for CVE-2026-1529, which allows unauthorized organization registration in Keycloak due to improper JWT token validation. The exploit manipulates the `org_id` and `email` fields in the JWT payload to register users in unauthorized organizations.

This repository contains a functional exploit for CVE-2026-1529 targeting Keycloak, demonstrating unauthorized access via JWT manipulation and HTTP request crafting. The exploit includes detailed setup guides, configuration options, and troubleshooting steps.

This repository contains a functional exploit for CVE-2026-1529, which allows unauthorized organization registration in Keycloak due to improper JWT token validation. The exploit manipulates the `org_id` and `email` fields in the JWT payload to register users in unauthorized organizations.