Aller au contenu

Vulnérabilités de Red Hat Red Hat build of Keycloak 26.4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-19607 A flaw was found in the first-broker-login flow of the keycloak-services component 5.3 Moyenne 16 sept. 2026
CVE-2026-17526 Keycloak is an open-source identity and access management solution 7.2 Élevée 16 sept. 2026
CVE-2026-79651 A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service… 7.5 Élevée 16 sept. 2026
CVE-2026-74909 Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security… 8.1 Élevée 16 sept. 2026
CVE-2026-18212 A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access… 7.5 Élevée 16 sept. 2026
CVE-2026-19729 A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red… 4.9 Moyenne 9 sept. 2026
CVE-2026-18963 A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity… 9.1 Critique 18 août 2026
CVE-2026-15572 A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management 8.8 Élevée 5 août 2026
CVE-2026-16442 A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user… 7.4 Élevée 5 août 2026
CVE-2026-16071 A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external… 5.4 Moyenne 5 août 2026
CVE-2026-16102 A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management… 8.1 Élevée 5 août 2026
CVE-2026-15573 A flaw was found in Keycloak's Authorization Services 8.1 Élevée 5 août 2026
CVE-2026-16443 A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core… 7.4 Élevée 5 août 2026
CVE-2026-14615 A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative… 4.3 Moyenne 3 juil. 2026
CVE-2026-14614 A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)… 5.4 Moyenne 3 juil. 2026
CVE-2026-4629 A flaw was found in Keycloak 6.5 Moyenne 30 juin 2026
CVE-2026-14209 A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass… 4.3 Moyenne 30 juin 2026
CVE-2026-9083 A flaw was found in Keycloak 4.9 Moyenne 25 juin 2026
CVE-2026-9799 A flaw was found in org.keycloak.authorization 4.6 Moyenne 25 juin 2026
CVE-2026-9705 A flaw was found in Keycloak's client registration service 6.5 Moyenne 25 juin 2026
CVE-2026-9086 A flaw was found in Keycloak 7.3 Élevée 25 juin 2026
CVE-2026-9099 A flaw was found in Keycloak 7.7 Élevée 25 juin 2026
CVE-2026-9800 A flaw was found in Keycloak Policy Enforcer 8.1 Élevée 25 juin 2026
CVE-2026-54513 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor 8.1 Élevée 23 juin 2026
CVE-2026-9088 A flaw was found in org.keycloak.services 2.7 Faible 5 juin 2026

Autres produits Red Hat