RH
Product
Red Hat build of Keycloak 26.6
70
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 40Low 4
Watch
Add Red Hat build of Keycloak 26.6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-15572 | 8.8 | Aug 5 | Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation Affected: All versions, or not specified |
| CVE-2026-9704 | 8.8 | May 27 | Keycloak: keycloak: privilege escalation due to oversized subject_token jwt Affected: All versions, or not specified |
| CVE-2026-74909 | 8.1 | Sep 16 | Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments Affected: All versions, or not specified |
| CVE-2026-16102 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers Affected: All versions, or not specified |
| CVE-2026-15573 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher Affected: All versions, or not specified |
| CVE-2026-18214 | 8.1 | Jul 31 | Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction Affected: All versions, or not specified |
| CVE-2026-18215 | 8.1 | Jul 31 | Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant Affected: All versions, or not specified |
| CVE-2026-11800 | 8.1 | Jun 25 | Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion Affected: All versions, or not specified |
| CVE-2026-9800 | 8.1 | Jun 25 | Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison Affected: All versions, or not specified |
| CVE-2026-54513 | 8.1 | Jun 23 | jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) Affected: All versions, or not specified |
| CVE-2026-9087 | 8.1 | May 20 | Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login Affected: All versions, or not specified |
| CVE-2026-9099 | 7.7 | Jun 25 | Keycloak: group-admin escalation to realm-admin Affected: All versions, or not specified |
| CVE-2026-79651 | 7.5 | Sep 16 | Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching Affected: All versions, or not specified |
| CVE-2026-18212 | 7.5 | Sep 16 | Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state Affected: All versions, or not specified |
| CVE-2026-17615 | 7.5 | Aug 31 | Resteasy-core: resteasy sourceprovider remote unauthenticated file read Affected: All versions, or not specified |
| CVE-2026-40984 | 7.5 | Jun 9 | Micrometer HTTP server instrumentations DoS vulnerability Affected: All versions, or not specified |
| CVE-2026-40983 | 7.5 | Jun 9 | Micrometer gRPC server instrumentation DoS vulnerability Affected: All versions, or not specified |
| CVE-2026-9793 | 7.5 | May 28 | Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing Affected: All versions, or not specified |
| CVE-2026-15571 | 7.3 | Aug 18 | Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client Affected: All versions, or not specified |
| CVE-2026-9086 | 7.3 | Jun 25 | Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass Affected: All versions, or not specified |
| CVE-2026-9795 | 7.3 | May 28 | Keycloak: keycloak: privilege escalation via improper scope mapping enforcement Affected: All versions, or not specified |
| CVE-2026-17526 | 7.2 | Sep 16 | Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts Affected: All versions, or not specified |
| CVE-2026-18571 | 7.2 | Aug 2 | Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation Affected: All versions, or not specified |
Showing 23