Vulnérabilités connues pour Red Hat build of Keycloak 26.4

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-93491	Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue	7.5 Élevée	18 sept. 2026
CVE-2026-93488	Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams	7.5 Élevée	18 sept. 2026
CVE-2026-19607	A flaw was found in the first-broker-login flow of the keycloak-services component	5.3 Moyenne	16 sept. 2026
CVE-2026-17526	Keycloak is an open-source identity and access management solution	7.2 Élevée	16 sept. 2026
CVE-2026-79651	A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service…	7.5 Élevée	16 sept. 2026
CVE-2026-74909	Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security…	8.1 Élevée	16 sept. 2026
CVE-2026-18212	A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access…	7.5 Élevée	16 sept. 2026
CVE-2026-19729	Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters	4.9 Moyenne	9 sept. 2026
CVE-2026-19611	Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding	7.4 Élevée	20 août 2026
CVE-2026-18963	A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity…	9.1 Critique	18 août 2026
CVE-2026-15572	A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management	8.8 Élevée	5 août 2026
CVE-2026-16442	A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user…	7.4 Élevée	5 août 2026
CVE-2026-16071	A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external…	5.4 Moyenne	5 août 2026
CVE-2026-16102	A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management…	8.1 Élevée	5 août 2026
CVE-2026-15573	A flaw was found in Keycloak's Authorization Services	8.1 Élevée	5 août 2026
CVE-2026-16443	A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core…	7.4 Élevée	5 août 2026
CVE-2026-18217	Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution	3.4 Faible	31 juil. 2026
CVE-2026-14615	A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative…	4.3 Moyenne	3 juil. 2026
CVE-2026-14614	A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)…	5.4 Moyenne	3 juil. 2026
CVE-2026-4629	A flaw was found in Keycloak	6.5 Moyenne	30 juin 2026
CVE-2026-14209	A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass…	4.3 Moyenne	30 juin 2026
CVE-2026-9083	A flaw was found in Keycloak	4.9 Moyenne	25 juin 2026
CVE-2026-9799	A flaw was found in org.keycloak.authorization	4.6 Moyenne	25 juin 2026
CVE-2026-9705	A flaw was found in Keycloak's client registration service	6.5 Moyenne	25 juin 2026
CVE-2026-9086	A flaw was found in Keycloak	7.3 Élevée	25 juin 2026

Autres produits Red Hat