Vulnérabilités de Red Hat Red Hat Single Sign-On 7

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-93572	A flaw was found in Netty's `RedisArrayAggregator` component	7.5 Élevée	18 sept. 2026
CVE-2026-93575	A flaw was found in Netty's MqttDecoder	7.5 Élevée	18 sept. 2026
CVE-2026-93561	A flaw was found in io.netty/netty-codec-memcache	6.5 Moyenne	18 sept. 2026
CVE-2026-93494	A flaw was found in Netty's StompSubframeDecoder component	7.5 Élevée	18 sept. 2026
CVE-2026-89058	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config	7.4 Élevée	18 sept. 2026
CVE-2026-89059	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)	7.5 Élevée	18 sept. 2026
CVE-2026-19607	A flaw was found in the first-broker-login flow of the keycloak-services component	5.3 Moyenne	16 sept. 2026
CVE-2026-17526	Keycloak is an open-source identity and access management solution	7.2 Élevée	16 sept. 2026
CVE-2026-79651	A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service…	7.5 Élevée	16 sept. 2026
CVE-2026-74909	Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security…	8.1 Élevée	16 sept. 2026
CVE-2026-18212	A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access…	7.5 Élevée	16 sept. 2026
CVE-2026-92358	A flaw was found in the first broker login flow of Keycloak	6.4 Moyenne	16 sept. 2026
CVE-2026-89298	A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management…	4.9 Moyenne	11 sept. 2026
CVE-2026-88770	A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution	6.5 Moyenne	10 sept. 2026
CVE-2026-19729	A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red…	4.9 Moyenne	9 sept. 2026
CVE-2026-82968	A flaw was found in the first-broker-login flow of the Keycloak identity management service	6.4 Moyenne	2 sept. 2026
CVE-2026-81624	Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite	7.5 Élevée	31 août 2026
CVE-2026-5680	Undertow-core: undertow: denial of service via websocket permessage-deflate processing	7.5 Élevée	27 août 2026
CVE-2026-79652	A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red…	5.9 Moyenne	25 août 2026
CVE-2026-19611	A flaw was found in WildFly Elytron	7.4 Élevée	20 août 2026
CVE-2026-76166	A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module)	4.3 Moyenne	19 août 2026
CVE-2026-15571	A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity…	7.3 Élevée	18 août 2026
CVE-2026-18963	A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity…	9.1 Critique	18 août 2026
CVE-2026-19608	A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained…	5.3 Moyenne	18 août 2026
CVE-2026-19879	Io.undertow/undertow: undertow: http response header integrity issue due to character truncation	5.3 Moyenne	14 août 2026

Autres produits Red Hat