Known vulnerabilities in Red Hat Build of Keycloak
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-120984 | Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import | 9.1 Critical | Nov 7, 2026 |
| CVE-2026-117691 | Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names | 9.1 Critical | Nov 5, 2026 |
| CVE-2026-18963 | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity… | 9.1 Critical | Aug 18, 2026 |
| CVE-2025-14813 | : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc | 9.3 Critical | Apr 15, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 505
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 478
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 462
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433