Skip to content

Vulnerabilities of Red Hat Red Hat build of Keycloak 26.6.3

Is your version affected?

CVE Summary Score Published
CVE-2026-9088 A flaw was found in org.keycloak.services 2.7 Low Jun 5, 2026
CVE-2026-9802 A flaw was found in Keycloak 6.8 Medium May 28, 2026
CVE-2026-9803 A flaw was found in Keycloak's ClientRegistrationAuth component 5.3 Medium May 28, 2026
CVE-2026-9801 A flaw was found in Keycloak 4.9 Medium May 28, 2026
CVE-2026-9794 A flaw was found in Keycloak 5.3 Medium May 28, 2026
CVE-2026-9792 A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component 6.5 Medium May 28, 2026
CVE-2026-9791 A flaw was found in Keycloak 4.3 Medium May 28, 2026
CVE-2026-9704 A flaw was found in Keycloak 6.8 Medium May 27, 2026
CVE-2026-9087 A flaw was found in Keycloak 6.4 Medium May 20, 2026
CVE-2026-8922 A flaw was found in Keycloak 5.4 Medium May 19, 2026
CVE-2026-8830 A flaw was found in Keycloak 4.3 Medium May 19, 2026
CVE-2026-7500 When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled 5.4 Medium Apr 30, 2026
CVE-2026-37977 A flaw was found in Keycloak 3.7 Low Apr 6, 2026
CVE-2026-4874 A flaw was found in Keycloak 3.1 Low Mar 26, 2026

Other Red Hat products