RH
Product
Red Hat build of Keycloak 26.6
70
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 40Low 4
Watch
Add Red Hat build of Keycloak 26.6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16442 | 9.8 | Aug 5 | Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction Affected: All versions, or not specified |
| CVE-2026-18963 | 9.1 | Aug 18 | Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass Affected: All versions, or not specified |
| CVE-2026-16443 | 9.1 | Aug 5 | Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation Affected: All versions, or not specified |
Showing 3