Vulnérabilités de Red Hat Red Hat Build of Keycloak

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-114438	A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution	4.2 Moyenne	21 oct. 2026
CVE-2026-109082	A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services…	6.8 Moyenne	12 oct. 2026
CVE-2026-107889	A flaw was found in the login theme rendering component of Keycloak	5.5 Moyenne	9 oct. 2026
CVE-2026-107623	A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak	4.3 Moyenne	8 oct. 2026
CVE-2026-107604	A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management…	4.9 Moyenne	8 oct. 2026
CVE-2026-107121	A flaw was found in the SMTP email configuration handling of the keycloak-services component	6.5 Moyenne	7 oct. 2026
CVE-2026-105305	A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow	5.4 Moyenne	6 oct. 2026
CVE-2026-105306	A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server	6.5 Moyenne	5 oct. 2026
CVE-2026-105302	A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution	5.7 Moyenne	5 oct. 2026
CVE-2026-105301	A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access…	4.0 Moyenne	5 oct. 2026
CVE-2026-103884	A flaw was found in the X.509 client certificate authenticator of Keycloak	6.5 Moyenne	1 oct. 2026
CVE-2026-101333	A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and…	3.7 Faible	28 sept. 2026
CVE-2026-96448	A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access…	6.6 Moyenne	25 sept. 2026
CVE-2026-97846	Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the…	6.8 Moyenne	25 sept. 2026
CVE-2026-97311	A flaw was found in the Admin REST API of Keycloak, an identity and access management solution	4.3 Moyenne	24 sept. 2026
CVE-2026-97177	A flaw was found in the user update mechanism of the Keycloak Admin REST API	6.6 Moyenne	24 sept. 2026
CVE-2026-97176	A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management…	4.2 Moyenne	24 sept. 2026
CVE-2026-96445	A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution	6.8 Moyenne	23 sept. 2026
CVE-2026-96446	A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak	4.2 Moyenne	23 sept. 2026
CVE-2026-95503	A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution	6.8 Moyenne	22 sept. 2026
CVE-2026-94218	A flaw was found in the authentication session management of Keycloak, an identity and access management solution	3.1 Faible	21 sept. 2026
CVE-2026-94217	A flaw was found in the User-Managed Access (UMA) implementation of Keycloak	3.5 Faible	21 sept. 2026
CVE-2026-94215	A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution	5.5 Moyenne	21 sept. 2026
CVE-2026-94213	A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management…	4.9 Moyenne	21 sept. 2026
CVE-2026-94001	A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution	6.5 Moyenne	19 sept. 2026

Autres produits Red Hat