Known vulnerabilities in Red Hat build of Keycloak 26.6

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-9705	A flaw was found in Keycloak's client registration service	6.5 Medium	Jun 25, 2026
CVE-2026-9086	A flaw was found in Keycloak	7.3 High	Jun 25, 2026
CVE-2026-9099	A flaw was found in Keycloak	7.7 High	Jun 25, 2026
CVE-2026-9800	A flaw was found in Keycloak Policy Enforcer	8.1 High	Jun 25, 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 High	Jun 23, 2026
CVE-2026-11986	A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface…	4.9 Medium	Jun 11, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-9088	A flaw was found in org.keycloak.services	2.7 Low	Jun 5, 2026
CVE-2026-9802	A flaw was found in Keycloak	6.8 Medium	May 28, 2026
CVE-2026-9803	A flaw was found in Keycloak's ClientRegistrationAuth component	5.3 Medium	May 28, 2026
CVE-2026-9801	A flaw was found in Keycloak	4.9 Medium	May 28, 2026
CVE-2026-9798	A flaw was found in Keycloak, an open-source identity and access management solution	4.3 Medium	May 28, 2026
CVE-2026-9796	A flaw was found in Keycloak	6.5 Medium	May 28, 2026
CVE-2026-9795	A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature	7.3 High	May 28, 2026
CVE-2026-9794	A flaw was found in Keycloak	5.3 Medium	May 28, 2026
CVE-2026-9792	A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component	6.5 Medium	May 28, 2026
CVE-2026-9793	A flaw was found in Keycloak	5.9 Medium	May 28, 2026
CVE-2026-9791	A flaw was found in Keycloak	4.3 Medium	May 28, 2026
CVE-2026-9704	A flaw was found in Keycloak	6.8 Medium	May 27, 2026
CVE-2026-9689	A flaw was found in Keycloak, an open-source identity and access management solution	4.2 Medium	May 27, 2026
CVE-2026-9087	A flaw was found in Keycloak	6.4 Medium	May 20, 2026
CVE-2026-8922	A flaw was found in Keycloak	5.4 Medium	May 19, 2026
CVE-2026-8830	A flaw was found in Keycloak	4.3 Medium	May 19, 2026
CVE-2026-7500	When Keycloak is started with `--features-disabled=account,account-api`, the Account REST API is only partially disabled	5.4 Medium	Apr 30, 2026

Other Red Hat products