Vulnerabilities of Red Hat Red Hat build of Keycloak 26.6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-9088	A flaw was found in org.keycloak.services	2.7 Low	Jun 5, 2026
CVE-2026-9802	A flaw was found in Keycloak	6.8 Medium	May 28, 2026
CVE-2026-9803	A flaw was found in Keycloak's ClientRegistrationAuth component	5.3 Medium	May 28, 2026
CVE-2026-9801	A flaw was found in Keycloak	4.9 Medium	May 28, 2026
CVE-2026-9798	A flaw was found in Keycloak, an open-source identity and access management solution	4.3 Medium	May 28, 2026
CVE-2026-9796	A flaw was found in Keycloak	6.5 Medium	May 28, 2026
CVE-2026-9795	A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature	7.3 High	May 28, 2026
CVE-2026-9794	A flaw was found in Keycloak	5.3 Medium	May 28, 2026
CVE-2026-9792	A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component	6.5 Medium	May 28, 2026
CVE-2026-9793	A flaw was found in Keycloak	5.9 Medium	May 28, 2026
CVE-2026-9791	A flaw was found in Keycloak	4.3 Medium	May 28, 2026
CVE-2026-9704	A flaw was found in Keycloak	6.8 Medium	May 27, 2026
CVE-2026-9689	A flaw was found in Keycloak, an open-source identity and access management solution	4.2 Medium	May 27, 2026
CVE-2026-9087	A flaw was found in Keycloak	6.4 Medium	May 20, 2026
CVE-2026-8922	A flaw was found in Keycloak	5.4 Medium	May 19, 2026
CVE-2026-8830	A flaw was found in Keycloak	4.3 Medium	May 19, 2026
CVE-2026-7500	When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled	5.4 Medium	Apr 30, 2026
CVE-2026-37977	A flaw was found in Keycloak	3.7 Low	Apr 6, 2026
CVE-2026-4874	A flaw was found in Keycloak	3.1 Low	Mar 26, 2026

Other Red Hat products