Known vulnerabilities in Red Hat build of Keycloak 26.2
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-7507 | A session fixation vulnerability was found in Keycloak's login-actions endpoints | 7.5 High | May 19, 2026 |
| CVE-2026-7504 | A flaw was found in Keycloak's URL validation logic during redirect operations | 8.1 High | May 19, 2026 |
| CVE-2026-7307 | A flaw was found in Keycloak | 7.5 High | May 19, 2026 |
| CVE-2026-4636 | A flaw was found in Keycloak | 8.1 High | Apr 2, 2026 |
| CVE-2026-4634 | A flaw was found in Keycloak | 7.5 High | Apr 2, 2026 |
| CVE-2026-4282 | A flaw was found in Keycloak | 7.4 High | Apr 2, 2026 |
| CVE-2026-4325 | A flaw was found in Keycloak | 5.3 Medium | Apr 2, 2026 |
| CVE-2026-3872 | A flaw was found in Keycloak | 7.3 High | Apr 2, 2026 |
| CVE-2026-2603 | A flaw was found in Keycloak | 8.1 High | Mar 18, 2026 |
| CVE-2026-2092 | A flaw was found in Keycloak | 7.7 High | Mar 18, 2026 |
| CVE-2026-3047 | A flaw was found in org.keycloak.broker.saml | 8.8 High | Mar 5, 2026 |
| CVE-2025-12150 | A flaw was found in Keycloak’s WebAuthn registration component | 3.1 Low | Feb 27, 2026 |
| CVE-2025-14778 | A flaw was found in Keycloak | 5.4 Medium | Feb 9, 2026 |
| CVE-2026-1529 | A flaw was found in Keycloak | 8.1 High | Feb 9, 2026 |
| CVE-2025-11419 | A flaw was found in Keycloak | 7.5 High | Dec 23, 2025 |
| CVE-2025-13467 | A flaw was found in the Keycloak LDAP User Federation provider | 5.5 Medium | Nov 25, 2025 |
| CVE-2025-12390 | A flaw was found in Keycloak | 6.0 Medium | Oct 28, 2025 |
| CVE-2025-12110 | A flaw was found in Keycloak | 5.4 Medium | Oct 23, 2025 |
| CVE-2025-11429 | A flaw was found in Keycloak | 5.4 Medium | Oct 23, 2025 |
| CVE-2025-10044 | A flaw was found in Keycloak | 4.3 Medium | Sep 5, 2025 |
| CVE-2025-9162 | A flaw was found in org.keycloak/keycloak-model-storage-service | 4.9 Medium | Aug 21, 2025 |
| CVE-2025-8419 | A vulnerability was found in Keycloak-services | 5.3 Medium | Aug 6, 2025 |
| CVE-2025-7784 | A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are… | 6.5 Medium | Jul 18, 2025 |
| CVE-2025-7365 | A flaw was found in Keycloak | 7.1 High | Jul 10, 2025 |
| CVE-2025-3501 | A flaw was found in Keycloak | 8.2 High | Apr 29, 2025 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 505
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 478
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 462
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433