Known vulnerabilities in Red Hat Data Grid 8

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-16100	A flaw was found in the user-event metrics recording of Keycloak	6.5 Medium	Aug 5, 2026
CVE-2026-16071	A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external…	5.4 Medium	Aug 5, 2026
CVE-2026-16102	A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management…	8.1 High	Aug 5, 2026
CVE-2026-15573	A flaw was found in Keycloak's Authorization Services	8.1 High	Aug 5, 2026
CVE-2026-16443	A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core…	7.4 High	Aug 5, 2026
CVE-2026-18569	Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens	3.7 Low	Aug 4, 2026
CVE-2026-18573	A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and…	6.5 Medium	Aug 2, 2026
CVE-2026-18572	Keycloak provides authorization services that allow administrators to restrict access to resources based on time…	6.5 Medium	Aug 2, 2026
CVE-2026-18571	A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled	6.6 Medium	Aug 2, 2026
CVE-2026-18570	A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component	5.4 Medium	Aug 2, 2026
CVE-2026-18209	A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication…	3.4 Low	Jul 31, 2026
CVE-2026-18206	Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass	3.7 Low	Jul 31, 2026
CVE-2026-18203	Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes	6.5 Medium	Jul 31, 2026
CVE-2026-18214	Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google…	6.8 Medium	Jul 31, 2026
CVE-2026-18211	A flaw was found in the secure-client-uris client policy executor within Keycloak core services	4.2 Medium	Jul 31, 2026
CVE-2026-18208	Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim	6.5 Medium	Jul 31, 2026
CVE-2026-16105	A flaw was found in the RoleContainerResource component of Keycloak	4.9 Medium	Jul 31, 2026
CVE-2026-18215	Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization…	6.8 Medium	Jul 31, 2026
CVE-2026-18217	Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution	3.4 Low	Jul 31, 2026
CVE-2026-18218	A flaw was found in the TokenManager component of the Keycloak identity management service	4.2 Medium	Jul 31, 2026
CVE-2026-18201	Keycloak provides a way to manage identity providers and organizations through its administrative API	5.5 Medium	Jul 29, 2026
CVE-2026-18207	Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching	6.5 Medium	Jul 29, 2026
CVE-2026-17059	A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the…	6.5 Medium	Jul 24, 2026
CVE-2026-17048	A flaw was found in the Keycloak Admin REST API, which is used to manage security realms and clients	5.5 Medium	Jul 24, 2026
CVE-2026-16104	A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core…	4.3 Medium	Jul 17, 2026

Other Red Hat products