Vulnerabilities of Red Hat Red Hat build of Keycloak 26.4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-9802 | A flaw was found in Keycloak | 6.8 Medium | May 28, 2026 |
| CVE-2026-9803 | A flaw was found in Keycloak's ClientRegistrationAuth component | 5.3 Medium | May 28, 2026 |
| CVE-2026-9801 | A flaw was found in Keycloak | 4.9 Medium | May 28, 2026 |
| CVE-2026-9798 | A flaw was found in Keycloak, an open-source identity and access management solution | 4.3 Medium | May 28, 2026 |
| CVE-2026-9795 | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature | 7.3 High | May 28, 2026 |
| CVE-2026-9794 | A flaw was found in Keycloak | 5.3 Medium | May 28, 2026 |
| CVE-2026-9792 | A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component | 6.5 Medium | May 28, 2026 |
| CVE-2026-9793 | A flaw was found in Keycloak | 5.9 Medium | May 28, 2026 |
| CVE-2026-9791 | A flaw was found in Keycloak | 4.3 Medium | May 28, 2026 |
| CVE-2026-9704 | A flaw was found in Keycloak | 6.8 Medium | May 27, 2026 |
| CVE-2026-9689 | A flaw was found in Keycloak, an open-source identity and access management solution | 4.2 Medium | May 27, 2026 |
| CVE-2026-9087 | A flaw was found in Keycloak | 6.4 Medium | May 20, 2026 |
| CVE-2026-7571 | A flaw was found in Keycloak | 7.1 High | May 19, 2026 |
| CVE-2026-7507 | A session fixation vulnerability was found in Keycloak's login-actions endpoints | 7.5 High | May 19, 2026 |
| CVE-2026-7504 | A flaw was found in Keycloak's URL validation logic during redirect operations | 8.1 High | May 19, 2026 |
| CVE-2026-37982 | A flaw was found in Keycloak | 6.8 Medium | May 19, 2026 |
| CVE-2026-37979 | A flaw was found in Keycloak | 6.5 Medium | May 19, 2026 |
| CVE-2026-37978 | A flaw was found in Keycloak | 4.9 Medium | May 19, 2026 |
| CVE-2026-7307 | A flaw was found in Keycloak | 7.5 High | May 19, 2026 |
| CVE-2026-37981 | A flaw was found in Keycloak | 4.3 Medium | May 19, 2026 |
| CVE-2026-4630 | A flaw was found in Keycloak | 6.8 Medium | May 19, 2026 |
| CVE-2026-8922 | A flaw was found in Keycloak | 5.4 Medium | May 19, 2026 |
| CVE-2026-8830 | A flaw was found in Keycloak | 4.3 Medium | May 19, 2026 |
| CVE-2026-7500 | When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled | 5.4 Medium | Apr 30, 2026 |
| CVE-2026-37977 | A flaw was found in Keycloak | 3.7 Low | Apr 6, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433