Skip to content

Vulnerabilities of Red Hat Red Hat Build of Keycloak

Is your version affected?

CVE Summary Score Published
CVE-2026-117691 Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names 9.1 Critical Nov 5, 2026
CVE-2026-18963 A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity… 9.1 Critical Aug 18, 2026
CVE-2025-14813 : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc 9.3 Critical Apr 15, 2026

Other Red Hat products