Skip to contentRed Hat Build Of Keycloak 26.6.6 vulnerabilities
- red hat build of keycloak 26.6, build of keycloak 26.6.6, data grid 8 +2 more +4 moreKeycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc clientCVE-2026-15571Fix available7.3 High
- red hat build of keycloak 26.4, build of keycloak 26.4.15, build of keycloak 26.6 +11 more +13 moreKeycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypassCVE-2026-18963Public exploitFix available9.1 Critical
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 moreKeycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest apiCVE-2026-17048Fix available5.5 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 moreKeycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permissionCVE-2026-14613Fix available4.3 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +2 moreKeycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerabilityCVE-2026-9796Fix available6.5 Medium