Known vulnerabilities in Red Hat build of Keycloak 26.4.17
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-93492 | Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size | 5.3 Medium | Sep 18, 2026 |
| CVE-2026-93491 | Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue | 7.5 High | Sep 18, 2026 |
| CVE-2026-93488 | Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams | 7.5 High | Sep 18, 2026 |
| CVE-2026-19611 | Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding | 7.4 High | Aug 20, 2026 |
| CVE-2026-18217 | Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution | 3.4 Low | Jul 31, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 505
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 478
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 462
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433