Skip to contentRed Hat Build Of Keycloak 26 vulnerabilities
- red hat build of keycloak 26, build of keycloak 26.2, jboss enterprise application platform 8 +3 more +5 moreOrg.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)CVE-2025-7784Fix available6.5 Medium
- redhat keycloak, red hat build of keycloak 26, build of keycloak 26.0 +1 more +3 moreKeycloak: phishing attack via email verification step in first login flowCVE-2025-7365Fix available7.1 High
- red hat build of keycloak, build of keycloak 26.0 +1 moreOrg.keycloak.authentication: two factor authentication bypassCVE-2025-3910Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26, build of keycloak 26.0 +2 more +4 moreOrg.keycloak.protocol.services: keycloak hostname verificationCVE-2025-3501Fix available8.2 High
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloakCVE-2025-25594.9 Medium
- red hat build of keycloak, build of keycloak 26.0 +1 moreKeycloak-services: improper authorization in keycloak organization mapper allows unauthorized organization claimsCVE-2025-1391Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreKeycloak-ldap-federation: authentication bypass due to missing ldap bind after password reset in keycloakCVE-2025-0604Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headersCVE-2024-11734Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variablesCVE-2024-11736Fix available4.9 Medium
- red hat cryostat 3, cryostat 4 on rhel 9, hawtio hawtio 4.2.0 +12 more +14 moreIo.quarkus.http/quarkus-http-core: quarkus http cookie smugglingCVE-2024-12397Fix available7.4 High
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreKeycloak-quarkus-server: keycloak path trasversalCVE-2024-10492Fix available2.7 Low
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +3 more +5 moreOrg.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build processCVE-2024-10451Fix available5.9 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreOrg.keycloak:keycloak-services: keycloak denial of serviceCVE-2024-10270Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 24, build of keycloak 24.0.9 +3 more +5 moreOrg.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerabilityCVE-2024-9666Fix available4.7 Medium