Skip to contentRed Hat Build Of Keycloak 26.4.16 vulnerabilities
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: broker-originated username collision causes account lockoutCVE-2026-19607Public exploit5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +4 more +6 moreKeycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accountsCVE-2026-175267.2 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachingCVE-2026-796517.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentsCVE-2026-749098.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +4 more +6 moreKeycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib stateCVE-2026-182127.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.16, build of keycloak 26.6 +2 more +4 moreKeycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parametersCVE-2026-197294.9 Medium