Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114438	A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution	4.2 Medium	Oct 21, 2026
CVE-2026-109082	A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services…	6.8 Medium	Oct 12, 2026
CVE-2026-107889	A flaw was found in the login theme rendering component of Keycloak	5.5 Medium	Oct 9, 2026
CVE-2026-107623	A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak	4.3 Medium	Oct 8, 2026
CVE-2026-107604	A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management…	4.9 Medium	Oct 8, 2026
CVE-2026-107121	A flaw was found in the SMTP email configuration handling of the keycloak-services component	6.5 Medium	Oct 7, 2026
CVE-2026-105305	A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow	5.4 Medium	Oct 6, 2026
CVE-2026-105306	A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server	6.5 Medium	Oct 5, 2026
CVE-2026-105302	A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution	5.7 Medium	Oct 5, 2026
CVE-2026-105301	A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access…	4.0 Medium	Oct 5, 2026
CVE-2026-103884	A flaw was found in the X.509 client certificate authenticator of Keycloak	6.5 Medium	Oct 1, 2026
CVE-2026-101333	A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and…	3.7 Low	Sep 28, 2026
CVE-2026-96448	A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access…	6.6 Medium	Sep 25, 2026
CVE-2026-97846	Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the…	6.8 Medium	Sep 25, 2026
CVE-2026-97311	A flaw was found in the Admin REST API of Keycloak, an identity and access management solution	4.3 Medium	Sep 24, 2026
CVE-2026-97177	A flaw was found in the user update mechanism of the Keycloak Admin REST API	6.6 Medium	Sep 24, 2026
CVE-2026-97176	A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management…	4.2 Medium	Sep 24, 2026
CVE-2026-96445	A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution	6.8 Medium	Sep 23, 2026
CVE-2026-96446	A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak	4.2 Medium	Sep 23, 2026
CVE-2026-95503	A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution	6.8 Medium	Sep 22, 2026
CVE-2026-94218	A flaw was found in the authentication session management of Keycloak, an identity and access management solution	3.1 Low	Sep 21, 2026
CVE-2026-94217	A flaw was found in the User-Managed Access (UMA) implementation of Keycloak	3.5 Low	Sep 21, 2026
CVE-2026-94215	A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution	5.5 Medium	Sep 21, 2026
CVE-2026-94213	A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management…	4.9 Medium	Sep 21, 2026
CVE-2026-94001	A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution	6.5 Medium	Sep 19, 2026

Other Red Hat products