Known vulnerabilities in Red Hat Build of Keycloak

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Medium	Jun 12, 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 High	Jun 12, 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 High	Jun 12, 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 High	Jun 11, 2026
CVE-2026-11986	A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface…	4.9 Medium	Jun 11, 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 High	Jun 9, 2026
CVE-2026-11577	A flaw was found in Keycloak	7.2 High	Jun 8, 2026
CVE-2026-9088	A flaw was found in org.keycloak.services	2.7 Low	Jun 5, 2026
CVE-2026-10732	All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when…	6.4 Medium	Jun 5, 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 High	Jun 1, 2026
CVE-2026-9802	A flaw was found in Keycloak	6.8 Medium	May 28, 2026
CVE-2026-9803	A flaw was found in Keycloak's ClientRegistrationAuth component	5.3 Medium	May 28, 2026
CVE-2026-9801	A flaw was found in Keycloak	4.9 Medium	May 28, 2026
CVE-2026-9798	A flaw was found in Keycloak, an open-source identity and access management solution	4.3 Medium	May 28, 2026
CVE-2026-9796	A flaw was found in Keycloak	6.5 Medium	May 28, 2026
CVE-2026-9795	A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature	7.3 High	May 28, 2026
CVE-2026-9794	A flaw was found in Keycloak	5.3 Medium	May 28, 2026
CVE-2026-9792	A flaw was found in Keycloak's Client Policies, specifically within the `org.keycloak.protocol.oidc` component	6.5 Medium	May 28, 2026
CVE-2026-9793	A flaw was found in Keycloak	5.9 Medium	May 28, 2026
CVE-2026-9791	A flaw was found in Keycloak	4.3 Medium	May 28, 2026
CVE-2026-9704	A flaw was found in Keycloak	6.8 Medium	May 27, 2026

Other Red Hat products