Skip to contentRed Hat Build Of Keycloak 26.0 vulnerabilities
- red hat build of keycloak 26.0, build of keycloak 26.0.16, build of keycloak 26.2 +1 more +3 moreKeycloak: keycloak tls client-initiated renegotiation denial of serviceCVE-2025-11419Fix available7.5 High
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.0.17 +2 more +4 moreKeycloak: keycloak error_description injection on error pagesCVE-2025-10044Fix available4.3 Medium
- keycloak, red hat build of keycloak 26.0, build of keycloak 26.2 +1 more +3 moreOrg.keycloak/keycloak-model-storage-service: variable injection into environment variablesCVE-2025-9162Fix available4.9 Medium
- keycloak, red hat build of keycloak, build of keycloak 26.0 +1 more +3 moreOrg.keycloak/keycloak-services: keycloak smtp inject vulnerabilityCVE-2025-8419Fix available5.3 Medium
- redhat keycloak, red hat build of keycloak 26, build of keycloak 26.0 +1 more +3 moreKeycloak: phishing attack via email verification step in first login flowCVE-2025-7365Fix available7.1 High
- red hat build of keycloak, build of keycloak 26.0 +1 moreOrg.keycloak.authentication: two factor authentication bypassCVE-2025-3910Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26, build of keycloak 26.0 +2 more +4 moreOrg.keycloak.protocol.services: keycloak hostname verificationCVE-2025-3501Fix available8.2 High
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloakCVE-2025-25594.9 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreKeycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claimsCVE-2025-1391Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreKeycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloakCVE-2025-0604Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headersCVE-2024-11734Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variablesCVE-2024-11736Fix available4.9 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreKeycloak-quarkus-server: keycloak path trasversalCVE-2024-10492Fix available2.7 Low
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +3 more +5 moreOrg.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build processCVE-2024-10451Fix available5.9 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreOrg.keycloak:keycloak-services: keycloak denial of serviceCVE-2024-10270Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 24, build of keycloak 24.0.9 +3 more +5 moreOrg.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerabilityCVE-2024-9666Fix available4.7 Medium