Red Hat build of Keycloak 26.6.5 vulnerabilities | LiveThreat CVE Feed

Product

Red Hat build of Keycloak 26.6.5

by Red Hat · last CVE Jun 23, 2026

CVEs

On KEV

8.1

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 0Low 0

Severity

Exploitation

Watch

Add Red Hat build of Keycloak 26.6.5 to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-54513	8.1	1%	Jun 23	jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) Affected: All versions, or not specified
CVE-2026-40984	7.5	1%	Jun 9	Micrometer HTTP server instrumentations DoS vulnerability Affected: All versions, or not specified
CVE-2026-40983	7.5	1%	Jun 9	Micrometer gRPC server instrumentation DoS vulnerability Affected: All versions, or not specified