Known vulnerabilities in Red Hat build of Keycloak 26.4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-8922	A flaw was found in Keycloak	5.4 Medium	May 19, 2026
CVE-2026-8830	A flaw was found in Keycloak	4.3 Medium	May 19, 2026
CVE-2026-7500	When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled	5.4 Medium	Apr 30, 2026
CVE-2026-37977	A flaw was found in Keycloak	3.7 Low	Apr 6, 2026
CVE-2026-4636	A flaw was found in Keycloak	8.1 High	Apr 2, 2026
CVE-2026-4634	A flaw was found in Keycloak	7.5 High	Apr 2, 2026
CVE-2026-4282	A flaw was found in Keycloak	7.4 High	Apr 2, 2026
CVE-2026-4325	A flaw was found in Keycloak	5.3 Medium	Apr 2, 2026
CVE-2026-3872	A flaw was found in Keycloak	7.3 High	Apr 2, 2026
CVE-2026-3121	A flaw was found in Keycloak	6.5 Medium	Mar 26, 2026
CVE-2026-3190	A flaw was found in Keycloak	4.3 Medium	Mar 26, 2026
CVE-2026-4874	A flaw was found in Keycloak	3.1 Low	Mar 26, 2026
CVE-2026-4366	A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP…	5.8 Medium	Mar 18, 2026
CVE-2026-2575	A flaw was found in Keycloak	5.3 Medium	Mar 18, 2026
CVE-2026-2603	A flaw was found in Keycloak	8.1 High	Mar 18, 2026
CVE-2026-2092	A flaw was found in Keycloak	7.7 High	Mar 18, 2026
CVE-2026-2366	A flaw was found in Keycloak	3.1 Low	Mar 12, 2026
CVE-2026-3429	A flaw was identified in the Account REST API of Keycloak that allows a user authenticated at a lower security level…	4.2 Medium	Mar 11, 2026
CVE-2026-3911	A flaw was found in Keycloak	2.7 Low	Mar 11, 2026
CVE-2026-3047	A flaw was found in org.keycloak.broker.saml	8.8 High	Mar 5, 2026
CVE-2026-3009	A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an…	8.1 High	Mar 5, 2026
CVE-2025-12150	A flaw was found in Keycloak’s WebAuthn registration component	3.1 Low	Feb 27, 2026
CVE-2026-0871	A flaw was found in Keycloak	4.9 Medium	Feb 27, 2026
CVE-2026-2733	A flaw was identified in the Docker v2 authentication endpoint of Keycloak, where tokens continue to be issued even…	3.8 Low	Feb 19, 2026
CVE-2025-14778	A flaw was found in Keycloak	5.4 Medium	Feb 9, 2026

Other Red Hat products