Known vulnerabilities in Red Hat build of Keycloak 26.4

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-1529	A flaw was found in Keycloak	8.1 High	Feb 9, 2026
CVE-2026-1486	A flaw was found in Keycloak	8.8 High	Feb 9, 2026
CVE-2025-13881	A flaw was found in Keycloak Admin API	2.7 Low	Feb 2, 2026
CVE-2026-1190	A flaw was found in Keycloak's SAML brokering functionality	3.1 Low	Jan 26, 2026
CVE-2025-14083	A flaw was found in the Keycloak Admin REST API	2.7 Low	Jan 21, 2026
CVE-2025-14559	A flaw was found in the keycloak-services component of Keycloak	6.5 Medium	Jan 21, 2026
CVE-2026-1035	A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class…	3.1 Low	Jan 21, 2026
CVE-2026-1180	A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using…	5.8 Medium	Jan 20, 2026
CVE-2026-0707	A flaw was found in Keycloak	5.3 Medium	Jan 8, 2026
CVE-2025-14777	A flaw was found in Keycloak	6.0 Medium	Dec 16, 2025
CVE-2025-14082	A flaw was found in Keycloak Admin REST (Representational State Transfer) API	2.7 Low	Dec 10, 2025
CVE-2025-13467	A flaw was found in the Keycloak LDAP User Federation provider	5.5 Medium	Nov 25, 2025
CVE-2025-11538	A vulnerability exists in Keycloak's server distribution where enabling debug mode (--debug ) insecurely defaults to…	6.8 Medium	Nov 13, 2025
CVE-2025-12390	A flaw was found in Keycloak	6.0 Medium	Oct 28, 2025
CVE-2025-10939	A flaw was found in Keycloak	3.7 Low	Oct 28, 2025
CVE-2025-12110	A flaw was found in Keycloak	5.4 Medium	Oct 23, 2025