Known vulnerabilities in Red Hat build of Keycloak 26.6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-107623	Keycloak-services: keycloak-services: oidc dcr read-modify-write silently disables offline token revocation	4.3 Medium	Oct 8, 2026
CVE-2026-107121	Keycloak-services: keycloak-services: smtp starttls plaintext credential and message downgrade	6.5 Medium	Oct 7, 2026
CVE-2026-105305	Keycloak-services: keycloak-services: device authorization grant bypasses per-client minimum.acr.value enforcement	5.4 Medium	Oct 6, 2026
CVE-2026-103884	Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read	6.5 Medium	Oct 1, 2026
CVE-2026-94001	Keycloak-services: keycloak-services: admin credential delete bypasses denied reset-password permission	6.5 Medium	Sep 19, 2026
CVE-2026-94000	Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership	6.6 Medium	Sep 19, 2026
CVE-2026-93999	Keycloak-services: keycloak-services: token refresh continues issuing tokens for disabled audience clients	4.2 Medium	Sep 19, 2026
CVE-2026-93562	Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling	6.5 Medium	Sep 18, 2026
CVE-2026-93574	Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing	6.5 Medium	Sep 18, 2026
CVE-2026-93579	Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)	6.5 Medium	Sep 18, 2026
CVE-2026-93573	Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling	6.5 Medium	Sep 18, 2026
CVE-2026-93568	Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests	7.5 High	Sep 18, 2026
CVE-2026-93569	Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority	8.2 High	Sep 18, 2026
CVE-2026-93567	Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority	7.5 High	Sep 18, 2026
CVE-2026-93566	Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line	6.5 Medium	Sep 18, 2026
CVE-2026-93565	Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte	7.5 High	Sep 18, 2026
CVE-2026-93564	Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)	7.5 High	Sep 18, 2026
CVE-2026-93558	Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service	7.5 High	Sep 18, 2026
CVE-2026-93492	Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size	5.3 Medium	Sep 18, 2026
CVE-2026-93491	Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue	7.5 High	Sep 18, 2026
CVE-2026-93488	Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams	7.5 High	Sep 18, 2026
CVE-2026-19607	A flaw was found in the first-broker-login flow of the keycloak-services component	5.3 Medium	Sep 16, 2026
CVE-2026-17526	Keycloak is an open-source identity and access management solution	7.2 High	Sep 16, 2026
CVE-2026-79651	A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service…	7.5 High	Sep 16, 2026
CVE-2026-74909	Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security…	8.1 High	Sep 16, 2026

Other Red Hat products