Skip to contentRed Hat Build Of Keycloak 26.4.10 vulnerabilities
- red hat build of keycloak 26.4, build of keycloak 26.4.10, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: keycloak: denial of service due to excessive samlrequest decompressionCVE-2026-2575Fix available5.3 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +2 more +4 moreKeycloak: keycloak: unauthorized authentication via disabled saml identity providerCVE-2026-2603Fix available8.1 High
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +7 more +9 moreKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertionsCVE-2026-2092Fix available7.7 High
- redhat keycloak, red hat build of keycloak 26.2, build of keycloak 26.2.14 +3 more +5 moreOrg.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated loginCVE-2026-3047Fix available8.8 High
- red hat build of keycloak 26.4, build of keycloak 26.4.10, jboss enterprise application platform 8 +5 more +7 moreOrg.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)CVE-2026-3009Fix available8.1 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.10 +3 more +5 moreOrg.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocolCVE-2026-27333.8 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.10, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdataCVE-2026-11903.1 Low
- red hat build of keycloak 26.4, build of keycloak 26.4.10 +1 moreKeycloak: keycloak authorization header parsing leading to potential security control bypassCVE-2026-07075.3 Medium