Login Request a demo
RH
Product
Red Hat build of Keycloak 26.6
by Red Hat · last CVE Sep 16, 2026
70
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities70In the news1Timeline
Severity mix
Critical 3High 23Medium 40Low 4
Severity
All severities70Critical3High23Medium40Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Red Hat build of Keycloak 26.6 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4874
3.1
0%
Mar 26
Org.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation
Affected: All versions, or not specified
CVE-2026-15945
2.7
0%
Jul 16
Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2
Affected: All versions, or not specified
CVE-2026-14615
2.7
0%
Jul 3
Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter
Affected: All versions, or not specified
CVE-2026-9088
2.7
0%
Jun 5
Keycloak: keycloak: information disclosure due to user profile permission bypass
Affected: All versions, or not specified
Showing 4