Skip to contentRed Hat Keycloak vulnerabilities
- red hat build of keycloak 26.4, build of keycloak 26.4.11, jboss enterprise application platform 8 +5 more +7 moreKeycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permissionCVE-2026-3121Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreKeycloak: keycloak: information disclosure via improper role enforcement in uma 2.0 protection apiCVE-2026-3190Fix available4.3 Medium
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.13 +7 more +9 moreOrg.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulationCVE-2026-4874Fix available3.1 Low
- red hat build of keycloak, build of keycloak 26.4.12 +1 moreKeycloak: keycloak: user enumeration via differential error messagesCVE-2026-4633Fix available3.7 Low
- red hat build of keycloak, build of keycloak 26.4.12, jboss enterprise application platform 8 +2 more +4 moreKeycloak: org.keycloak.authorization: keycloak: unauthorized resource modification due to improper access controlCVE-2026-46284.3 Medium
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Prototype Pollution via parse()CVE-2026-33228Fix available8.9 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.12 +5 more +7 moreKeycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloakCVE-2026-43665.8 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.10, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: keycloak: denial of service due to excessive samlrequest decompressionCVE-2026-2575Fix available5.3 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: unauthorized authentication via disabled saml identity providerCVE-2026-2603Fix available8.1 High
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +7 more +9 moreKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertionsCVE-2026-2092Fix available7.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreKeycloak: keycloak: information disclosure via authorization bypass in admin apiCVE-2026-2366Fix available3.1 Low
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.11 +3 more +5 moreOrg.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest apiCVE-2026-3429Fix available4.2 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreOrg.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpointCVE-2026-3911Fix available2.7 Low
- redhat keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.14 +3 more +5 moreOrg.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated loginCVE-2026-3047Fix available8.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.10, jboss enterprise application platform 8 +5 more +7 moreOrg.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)CVE-2026-3009Fix available8.1 High
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +3 more +5 moreOrg.keycloak/keycloak-services: webauthn attestation statement verification bypassCVE-2025-12150Fix available3.1 Low
- redhat keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.9 +4 more +6 moreOrg.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administratorsCVE-2026-0871Fix available4.9 Medium
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.10 +3 more +5 moreOrg.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocolCVE-2026-27333.8 Low
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` optionCVE-2025-69873Fix available2.9 Low
- red hat build of keycloak, build of keycloak 26.4.2 +1 moreKeycloak-services: sensitive headers shown in the http access logsCVE-2025-11537Fix available5.0 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.13, build of keycloak 26.4 +1 more +3 moreKeycloak: incorrect ownership checks in /uma-policy/CVE-2025-14778Fix available5.4 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.13, build of keycloak 26.4 +1 more +3 moreOrg.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validationCVE-2026-1529Public exploitFix available8.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 moreOrg.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grantCVE-2026-1486Fix available8.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 moreOrg.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin apiCVE-2025-13881Fix available2.7 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.10, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdataCVE-2026-11903.1 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.11 +1 moreKeycloak-server: keycloak: improper access control in admin rest api leads to information disclosureCVE-2025-140832.7 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.9 +1 moreOrg.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled usersCVE-2025-14559Fix available6.5 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak.protocol.oidc: keycloak refresh token reuse bypass via toctou race conditionCVE-2026-10353.1 Low
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.11 +3 more +5 moreOrg.keycloak.protocol.oidc: blind server-side request forgery (ssrf) in keycloak oidc dynamic client registration via jwks_uriCVE-2026-11805.8 Medium
- red hat build of keycloak, build of keycloak 26.4.9, jboss enterprise application platform 8 +1 more +3 moreOrg.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url pathsCVE-2026-09763.7 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.10 +1 moreKeycloak: keycloak authorization header parsing leading to potential security control bypassCVE-2026-07075.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11 +1 moreKeycloak: keycloak idor in realm client creating/deletingCVE-2025-147776.0 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.11 +1 moreKeycloak-services: keycloak admin rest api: improper access control leads to sensitive role metadata information disclosureCVE-2025-14082Fix available2.7 Low
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +29 more +31 moreUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedCVE-2024-3884Fix available7.5 High
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federationCVE-2025-13467Fix available5.5 Medium
- keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.4 +2 moreKeycloak-server: debug default bind addressCVE-2025-11538Fix available6.8 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreOrg.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session idCVE-2025-12390Fix available6.0 Medium
- keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.4 +2 moreOrg.keycloak/keycloak-quarkus-server: unable to restrict access to the admin consoleCVE-2025-10939Fix available3.7 Low
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of serviceCVE-2025-11419Fix available7.5 High
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 more +4 moreKeycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removedCVE-2025-12110Fix available5.4 Medium
- keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.11 +2 moreKeycloak-server: too long and not settings compliant sessionCVE-2025-11429Fix available5.4 Medium
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.0.17 +2 more +4 moreKeycloak: keycloak error_description injection on error pagesCVE-2025-10044Fix available4.3 Medium
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.2 +1 more +3 moreOrg.keycloak/keycloak-model-storage-service: variable injection into environment variablesCVE-2025-9162Fix available4.9 Medium
- keycloak, red hat build of keycloak, build of keycloak 26.0 +1 more +3 moreOrg.keycloak/keycloak-services: keycloak smtp inject vulnerabilityCVE-2025-8419Fix available5.3 Medium
- red hat build of keycloak 26, build of keycloak 26.2, jboss enterprise application platform 8 +3 more +5 moreOrg.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)CVE-2025-7784Fix available6.5 Medium
- redhat keycloak, red hat build of keycloak 26, build of keycloak 26.0 +1 more +3 moreKeycloak: phishing attack via email verification step in first login flowCVE-2025-7365Fix available7.1 High
- redhat keycloak, red hat build of keycloak +1 moreKeycloak-core: keycloak environment informationCVE-2025-54162.7 Low
- red hat build of keycloak, build of keycloak 26.0 +1 moreOrg.keycloak.authentication: two factor authentication bypassCVE-2025-3910Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26, build of keycloak 26.0 +2 more +4 moreOrg.keycloak.protocol.services: keycloak hostname verificationCVE-2025-3501Fix available8.2 High
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloakCVE-2025-25594.9 Medium
- Show moreLoading…