Vulnerabilities of Red Hat Red Hat build of Keycloak 26.6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-19607	A flaw was found in the first-broker-login flow of the keycloak-services component	5.3 Medium	Sep 16, 2026
CVE-2026-17526	Keycloak is an open-source identity and access management solution	7.2 High	Sep 16, 2026
CVE-2026-79651	A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service…	7.5 High	Sep 16, 2026
CVE-2026-74909	Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security…	8.1 High	Sep 16, 2026
CVE-2026-18212	A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access…	7.5 High	Sep 16, 2026
CVE-2026-19729	Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters	4.9 Medium	Sep 9, 2026
CVE-2026-17615	Resteasy-core: resteasy sourceprovider remote unauthenticated file read	7.5 High	Aug 31, 2026
CVE-2026-79652	A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red…	5.9 Medium	Aug 25, 2026
CVE-2026-15571	A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity…	7.3 High	Aug 18, 2026
CVE-2026-18963	A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity…	9.1 Critical	Aug 18, 2026
CVE-2026-15572	A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management	8.8 High	Aug 5, 2026
CVE-2026-16442	A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user…	7.4 High	Aug 5, 2026
CVE-2026-16100	A flaw was found in the user-event metrics recording of Keycloak	6.5 Medium	Aug 5, 2026
CVE-2026-16071	A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external…	5.4 Medium	Aug 5, 2026
CVE-2026-16102	A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management…	8.1 High	Aug 5, 2026
CVE-2026-15573	A flaw was found in Keycloak's Authorization Services	8.1 High	Aug 5, 2026
CVE-2026-16443	A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core…	7.4 High	Aug 5, 2026
CVE-2026-18573	A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and…	6.5 Medium	Aug 2, 2026
CVE-2026-18572	Keycloak provides authorization services that allow administrators to restrict access to resources based on time…	6.5 Medium	Aug 2, 2026
CVE-2026-18571	A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled	6.6 Medium	Aug 2, 2026
CVE-2026-18570	A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component	5.4 Medium	Aug 2, 2026
CVE-2026-18209	A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication…	3.4 Low	Jul 31, 2026
CVE-2026-18214	Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google…	6.8 Medium	Jul 31, 2026
CVE-2026-16105	A flaw was found in the RoleContainerResource component of Keycloak	4.9 Medium	Jul 31, 2026
CVE-2026-18215	Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization…	6.8 Medium	Jul 31, 2026

Other Red Hat products