Vulnerabilities of Red Hat Red Hat Data Grid 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-16103	Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption	4.3 Medium	Jul 17, 2026
CVE-2026-16106	A flaw was found in the admin REST API of Keycloak, a solution for identity and access management	4.9 Medium	Jul 17, 2026
CVE-2026-16108	A flaw was found in the default-groups REST endpoint and realm representation of Keycloak	4.3 Medium	Jul 17, 2026
CVE-2026-16093	Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them…	5.4 Medium	Jul 17, 2026
CVE-2026-16089	A flaw was found in the keycloak-services component of Red Hat Build of Keycloak	5.4 Medium	Jul 17, 2026
CVE-2026-16072	A flaw was found in the organization management component of Keycloak	4.9 Medium	Jul 17, 2026
CVE-2026-15943	Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change	5.5 Medium	Jul 17, 2026
CVE-2026-15945	A flaw was found in the group search functionality of the Keycloak server's administrative API	4.3 Medium	Jul 16, 2026
CVE-2026-14781	A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the…	4.8 Medium	Jul 5, 2026
CVE-2026-14614	A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)…	5.4 Medium	Jul 3, 2026
CVE-2026-14613	A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see…	4.3 Medium	Jul 3, 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-57915	It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized…	Not rated	Jun 26, 2026
CVE-2026-11800	A flaw was found in Keycloak	8.1 High	Jun 25, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 High	Jun 12, 2026
CVE-2026-50011	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-48006	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-46340	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026

Other Red Hat products