Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-12388	A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user…	6.5 Medium	Jun 30, 2026
CVE-2026-4629	A flaw was found in Keycloak	6.5 Medium	Jun 30, 2026
CVE-2026-14209	A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass…	4.3 Medium	Jun 30, 2026
CVE-2026-11800	A flaw was found in Keycloak	8.1 High	Jun 25, 2026
CVE-2026-9083	A flaw was found in Keycloak	4.9 Medium	Jun 25, 2026
CVE-2026-9799	A flaw was found in org.keycloak.authorization	4.6 Medium	Jun 25, 2026
CVE-2026-9705	A flaw was found in Keycloak's client registration service	6.5 Medium	Jun 25, 2026
CVE-2026-9086	A flaw was found in Keycloak	7.3 High	Jun 25, 2026
CVE-2026-9099	A flaw was found in Keycloak	7.7 High	Jun 25, 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 High	Jun 25, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-50559	Quarkus is a Java framework for building cloud-native applications	7.5 High	Jun 19, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-11986	A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface…	4.9 Medium	Jun 11, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-11577	A flaw was found in Keycloak	7.2 High	Jun 8, 2026

Other Red Hat products