Known vulnerabilities in Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1518	A flaw was found in Keycloak’s CIBA feature where insufficient validation of client-configured backchannel…	2.7 Low	Feb 2, 2026
CVE-2025-13881	A flaw was found in Keycloak Admin API	2.7 Low	Feb 2, 2026
CVE-2024-4027	Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks	7.5 High	Jan 30, 2026
CVE-2026-1190	A flaw was found in Keycloak's SAML brokering functionality	3.1 Low	Jan 26, 2026
CVE-2025-14083	A flaw was found in the Keycloak Admin REST API	2.7 Low	Jan 21, 2026
CVE-2025-14559	A flaw was found in the keycloak-services component of Keycloak	6.5 Medium	Jan 21, 2026
CVE-2026-1035	A flaw was found in the Keycloak server during refresh token processing, specifically in the TokenManager class…	3.1 Low	Jan 21, 2026
CVE-2026-1180	A flaw was identified in Keycloak’s OpenID Connect Dynamic Client Registration feature when clients authenticate using…	5.8 Medium	Jan 20, 2026
CVE-2026-0976	A flaw was found in Keycloak	3.7 Low	Jan 15, 2026
CVE-2026-0707	A flaw was found in Keycloak	5.3 Medium	Jan 8, 2026
CVE-2025-14777	A flaw was found in Keycloak	6.0 Medium	Dec 16, 2025
CVE-2025-14082	A flaw was found in Keycloak Admin REST (Representational State Transfer) API	2.7 Low	Dec 10, 2025
CVE-2024-3884	Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded	High	Dec 3, 2025
CVE-2025-8419	A vulnerability was found in Keycloak-services	5.3 Medium	Aug 6, 2025
CVE-2025-5416	A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure	2.7 Low	Jun 20, 2025
CVE-2025-3910	A flaw was found in Keycloak	5.4 Medium	Apr 29, 2025
CVE-2025-3501	A flaw was found in Keycloak	8.2 High	Apr 29, 2025
CVE-2025-2559	A flaw was found in Keycloak	4.9 Medium	Mar 25, 2025
CVE-2025-23368	Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli	8.1 High	Mar 4, 2025
CVE-2024-4028	A vulnerability was found in Keycloak	3.8 Low	Feb 18, 2025
CVE-2025-1391	A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a…	5.4 Medium	Feb 17, 2025
CVE-2025-23367	Org.wildfly.core:wildfly-server: wildfly improper rbac permission	6.5 Medium	Jan 30, 2025
CVE-2025-0604	A flaw was found in Keycloak	5.4 Medium	Jan 22, 2025
CVE-2024-11736	A vulnerability was found in Keycloak	4.9 Medium	Jan 14, 2025
CVE-2024-11734	A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change…	6.5 Medium	Jan 14, 2025

Other Red Hat products