Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-3121	A flaw was found in Keycloak	6.5 Medium	Mar 26, 2026
CVE-2026-3190	A flaw was found in Keycloak	4.3 Medium	Mar 26, 2026
CVE-2026-4874	A flaw was found in Keycloak	3.1 Low	Mar 26, 2026
CVE-2026-4633	A flaw was found in Keycloak	3.7 Low	Mar 23, 2026
CVE-2026-4628	A flaw was found in Keycloak	4.3 Medium	Mar 23, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-4366	A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP…	5.8 Medium	Mar 18, 2026
CVE-2026-3429	A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level…	4.2 Medium	Mar 11, 2026
CVE-2026-2733	A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even…	3.8 Low	Feb 19, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2025-11537	A flaw was found in Keycloak	5.0 Medium	Feb 10, 2026
CVE-2025-14778	A flaw was found in Keycloak	5.4 Medium	Feb 9, 2026
CVE-2026-1529	A flaw was found in Keycloak	8.1 High	Feb 9, 2026
CVE-2026-1486	A flaw was found in Keycloak	8.8 High	Feb 9, 2026
CVE-2026-1518	A flaw was found in Keycloak’s CIBA feature where insufficient validation of client-configured backchannel…	2.7 Low	Feb 2, 2026
CVE-2025-13881	A flaw was found in Keycloak Admin API	2.7 Low	Feb 2, 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 High	Jan 30, 2026
CVE-2026-1190	A flaw was found in Keycloak's SAML brokering functionality	3.1 Low	Jan 26, 2026
CVE-2025-14083	A flaw was found in the Keycloak Admin REST API	2.7 Low	Jan 21, 2026
CVE-2025-14559	A flaw was found in the keycloak-services component of Keycloak	6.5 Medium	Jan 21, 2026
CVE-2026-1035	A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class…	3.1 Low	Jan 21, 2026
CVE-2026-1180	A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using…	5.8 Medium	Jan 20, 2026
CVE-2026-0976	A flaw was found in Keycloak	3.7 Low	Jan 15, 2026
CVE-2026-0707	A flaw was found in Keycloak	5.3 Medium	Jan 8, 2026
CVE-2025-14777	A flaw was found in Keycloak	6.0 Medium	Dec 16, 2025

Other Red Hat products