Redhat Keycloak vulnerabilities

• red hat build of keycloak, jboss enterprise application platform expansion pack, single sign-on 7 +2 more Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow CVE-2026-18967 6.4 MediumAugust 6, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 more Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation CVE-2026-15572 Fix available 8.8 HighAugust 5, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +5 more +7 more Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction CVE-2026-16442 Fix available 7.4 HighAugust 5, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.5, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text CVE-2026-16100 Fix available 6.5 MediumAugust 5, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +5 more +7 more Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary CVE-2026-16071 Fix available 5.4 MediumAugust 5, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +7 more +9 more Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers CVE-2026-16102 Fix available 8.1 HighAugust 5, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +7 more +9 more Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher CVE-2026-15573 Fix available 8.1 HighAugust 5, 2026
• redhat build of keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.14 +5 more +7 more Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation CVE-2026-16443 Fix available 7.4 HighAugust 5, 2026
• redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.8 +3 more +5 more Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens CVE-2026-18569 3.7 LowAugust 4, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: client access-type policy condition bypass during client update CVE-2026-18573 Fix available 6.5 MediumAugust 2, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes CVE-2026-18572 Fix available 6.5 MediumAugust 2, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation CVE-2026-18571 Fix available 6.6 MediumAugust 2, 2026
• redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.7 +3 more +5 more Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed CVE-2026-18570 Fix available 5.4 MediumAugust 2, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check CVE-2026-18209 Fix available 3.4 LowJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass CVE-2026-18206 3.7 LowJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction CVE-2026-18214 Fix available 6.8 MediumJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes CVE-2026-18203 6.5 MediumJuly 31, 2026
• red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 more Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains CVE-2026-18211 4.2 MediumJuly 31, 2026
• red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.8 +3 more +5 more Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim CVE-2026-18208 6.5 MediumJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: missing per-role authorization on rolecontainerresource composite endpoints CVE-2026-16105 Fix available 4.9 MediumJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: microsoft external access-token exchange bypasses configured tenant CVE-2026-18215 Fix available 6.8 MediumJuly 31, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.17, build of keycloak 26.6 +5 more +7 more Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution CVE-2026-18217 3.4 LowJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero CVE-2026-18218 Fix available 4.2 MediumJuly 31, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations CVE-2026-18201 Fix available 5.5 MediumJuly 29, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching CVE-2026-18207 6.5 MediumJuly 29, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter CVE-2026-17059 Fix available 6.5 MediumJuly 24, 2026
• red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 more Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api CVE-2026-17048 Fix available 5.5 MediumJuly 24, 2026
• redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.7 +3 more +5 more Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins CVE-2026-16104 Fix available 4.3 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption CVE-2026-16103 4.3 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles CVE-2026-16106 Fix available 4.9 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2 CVE-2026-16108 Fix available 4.3 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 more Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers CVE-2026-16093 Fix available 5.4 MediumJuly 17, 2026
• redhat build of keycloak, red hat build of keycloak 26.6, build of keycloak 26.6.7 +3 more +5 more Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session CVE-2026-16089 Fix available 5.4 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation CVE-2026-16072 Fix available 4.9 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, data grid 8 +3 more +5 more Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change CVE-2026-15943 5.5 MediumJuly 17, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +5 more +7 more Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 CVE-2026-15945 Fix available 4.3 MediumJuly 16, 2026
• keycloak, red hat jboss enterprise application platform 8, jboss enterprise application platform expansion pack +1 more +3 more Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users CVE-2026-1609 Fix available 8.1 HighJuly 16, 2026
• red hat build of keycloak, data grid 8, jboss enterprise application platform expansion pack +1 more +3 more Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email CVE-2026-14781 4.8 MediumJuly 5, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 more Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter CVE-2026-14615 Fix available 4.3 MediumJuly 3, 2026
• red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.14 +5 more +7 more Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource CVE-2026-14614 Fix available 5.4 MediumJuly 3, 2026
• red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +3 more +5 more Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission CVE-2026-14613 Fix available 4.3 MediumJuly 3, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6.5 +1 more +3 more Keycloak: keycloak: privilege escalation through hardcoded role mapper injection CVE-2026-4629 6.5 MediumJune 30, 2026
• red hat build of keycloak 26.6, build of keycloak 26.6.8, redhat build of keycloak +2 more Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper CVE-2026-12388 6.5 MediumJune 30, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +3 more +5 more Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions CVE-2026-14209 4.3 MediumJune 30, 2026
• red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.4 +3 more +5 more Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion CVE-2026-11800 Fix available 8.1 HighJune 25, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: information disclosure through arbitrary filesystem path probing CVE-2026-9083 Fix available 4.9 MediumJune 25, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass CVE-2026-9799 Fix available 4.6 MediumJune 25, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token CVE-2026-9705 Fix available 6.5 MediumJune 25, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass CVE-2026-9086 Public exploitFix available 7.3 HighJune 25, 2026
• red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: group-admin escalation to realm-admin CVE-2026-9099 Fix available 7.7 HighJune 25, 2026
• Show olderLoading…