Skip to contentRed Hat Single Sign-on 7 vulnerabilities
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 moreKeycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headersCVE-2026-16093Fix available5.4 Medium
- redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.7 +3 more +5 moreKeycloak-services: keycloak-services: authorization codes can be retargeted to another client sessionCVE-2026-16089Fix available5.4 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creationCVE-2026-16072Fix available4.9 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url changeCVE-2026-159435.5 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 moreKeycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2CVE-2026-15945Fix available4.3 Medium
- red hat jboss enterprise application platform 7, jboss enterprise application platform 8, jboss enterprise application platform 8.1 for rhel 10 +5 more +7 moreJastow: jastow cross-site scripting attack due to unsanitized uriCVE-2025-12799Fix available6.5 Medium
- red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 moreKeycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo emailCVE-2026-147814.8 Medium
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.14 +5 more +7 moreKeycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresourceCVE-2026-14614Fix available5.4 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 moreKeycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permissionCVE-2026-14613Fix available4.3 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.4 +3 more +5 moreOrg.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusionCVE-2026-11800Public exploitFix available8.1 High
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.4.14 +8 more +10 moreKeycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparisonCVE-2026-9800Fix available8.1 High
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 moreApache CXF: JNDI Injection Vulnerability in JMSConfigFactoryCVE-2026-50632Fix available8.1 High
- apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 moreApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtilsCVE-2026-49875Fix available9.8 Critical
- apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +4 more +6 moreApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)CVE-2026-44417Fix available7.5 High
- red hat build of keycloak 26.2, build of keycloak 26.2.16, build of keycloak 26.4 +7 more +9 moreOrg.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeoverCVE-2026-7507Fix available7.5 High
- red hat build of keycloak 26.2, build of keycloak 26.2.16, build of keycloak 26.4 +7 more +9 moreKeycloak: keycloak: denial of service via specially crafted saml inputCVE-2026-7307Fix available7.5 High
- spring boot, vmware spring boot, red hat amq broker 7 +14 more +16 moreSpring Boot's default security filter chain has no authorization rule with Actuator but without HealthCVE-2026-40976Fix available9.1 Critical
- spring boot, vmware spring boot, red hat hawtio hawtio 4.4.0 +14 more +16 moreSpring Boot's random value property source uses a weak PRNG unsuitable for secretsCVE-2026-40975Fix available4.8 Medium
- apache camel, apache software foundation camel platform http main, red hat openshift serverless +7 more +9 moreApache Camel Platform HTTP Main: Authentication Bypass on Non-Root Context Paths in camel main runtimeCVE-2026-40022Public exploitFix available8.2 High
- apache camel, apache software foundation camel coap, camel google pubsub +10 more +12 moreApache Camel JMS, Apache Camel CoAP, Apache Camel Google PubSub: Incomplete fix for CVE-2025-27636 in non-HTTP HeaderFilterStrategies (camel-jms, camel-sjms, camel-coap, camel-google-pubsub) allows ca…CVE-2026-40453Public exploitFix available9.9 Critical
- apache httpclient, red hat cryostat 4, migration toolkit for applications 8 +45 more +47 moreApache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verificationCVE-2026-40542Fix available7.3 High
- spring security, vmware spring security, red hat openshift developer tools and services +11 more +13 moreervlet Path Not Correctly Included in Path Matching of XML Authorization RulesCVE-2026-22754Fix available7.5 High
- spring security, vmware spring security, red hat openshift developer tools and services +11 more +13 moreUnauthorized User Impersonation when Using X.509 Client CertificatesCVE-2026-22747Public exploitFix available6.8 Medium
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper neutralization of specific syntax patterns for unauthorized expressions in ThymeleafCVE-2026-40478Known exploitedFix available9.1 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper restriction of the scope of accessible objects in Thymeleaf expressionsCVE-2026-40477Known exploitedPublic exploitFix available9.1 Critical
- legion of the bouncy castle inc. bc-java, red hat openshift developer tools and services, openshift developer tools and services 4.12 +30 more +32 moreUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.CVE-2026-3505Fix available8.7 High
- legion of the bouncy castle inc. bc-java, bcpix-lts, bcpkix-fips +43 more +45 morePKIX draft CompositeVerifier accepts empty signature sequence as valid.CVE-2026-5588Fix available6.3 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +29 more +31 moreNon-constant time comparisons risk private key leakage in FrodoKEM.CVE-2026-5598Fix available8.9 High
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +42 more +44 moreLDAP Injection Vulnerability in LDAPStoreHelper.javaCVE-2026-0636Fix available5.5 Medium
- legion of the bouncy castle inc. bc-java, red hat cryostat 4, openshift developer tools and services +44 more +46 moreGOSTCTR implementation unable to process more than 255 blocks correctlyCVE-2025-14813Fix available9.3 Critical
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +39 more +41 moreHTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-2332Public exploitFix available7.4 High
- red hat build of keycloak 26.2, build of keycloak 26.2.15, build of keycloak 26.4 +7 more +9 moreKeycloak: keycloak: denial of service via excessive processing of openid connect scope parametersCVE-2026-4634Fix available7.5 High
- lodash, lodash lodash-amd, lodash-es +105 more +107 morelodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800Public exploitFix available8.1 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 moreUndertow: undertow: request smuggling via malformed http request headersCVE-2026-28369Fix available8.7 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +20 more +22 moreUndertow: undertow: request smuggling via `\r\r\r` as a header block terminatorCVE-2026-28367Fix available8.7 High
- redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 moreUndertow: undertow: request smuggling via inconsistent header parsingCVE-2026-28368Fix available8.7 High
- red hat build of keycloak 26.4, build of keycloak 26.4.11, jboss enterprise application platform 8 +5 more +7 moreKeycloak: org.keycloak/keycloak-services: keycloak: privilege escalation via manage-clients permissionCVE-2026-3121Fix available6.5 Medium
- path-to-regexp, red hat cryostat 4, cryostat 4 on rhel 9 +49 more +51 morepath-to-regexp vulnerable to Denial of Service via sequential optional groupsCVE-2026-4926Fix available7.5 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.13 +7 more +9 moreOrg.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulationCVE-2026-4874Fix available3.1 Low
- codehaus-plexus plexus-utils, red hat cryostat 4, openshift developer tools and services +49 more +51 morePlexus-Utils has a Directory Traversal vulnerability in its extractFile methodCVE-2025-67030Fix available8.8 High
- red hat build of keycloak, build of keycloak 26.4.12, jboss enterprise application platform 8 +2 more +4 moreKeycloak: org.keycloak.authorization: keycloak: unauthorized resource modification due to improper access controlCVE-2026-46284.3 Medium
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Prototype Pollution via parse()CVE-2026-33228Fix available8.9 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.12 +5 more +7 moreKeycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloakCVE-2026-43665.8 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.10, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: keycloak: denial of service due to excessive samlrequest decompressionCVE-2026-2575Fix available5.3 Medium
- red hat build of keycloak 26.2, build of keycloak 26.2.14, build of keycloak 26.4 +7 more +9 moreKeycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertionsCVE-2026-2092Fix available7.7 High
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Unbounded recursion DoS in parse() revive phaseCVE-2026-32141Fix available7.5 High
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.11 +3 more +5 moreOrg.keycloak.services.resources.account: improper access control leading to mfa deletion and account takeover in keycloak account rest apiCVE-2026-3429Fix available4.2 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.10, jboss enterprise application platform 8 +5 more +7 moreOrg.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)CVE-2026-3009Fix available8.1 High
- eclipse jetty, red hat hawtio hawtio 4.4.0, openshift developer tools and services +35 more +37 moreThe Eclipse Jetty Server Artifact has a Gzip request memory leakCVE-2026-1605Fix available7.5 High
- Show moreLoading…