Vulnérabilités connues pour Red Hat build of Keycloak 26.6.5

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-15572	A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management	8.8 Élevée	5 août 2026
CVE-2026-16442	A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user…	7.4 Élevée	5 août 2026
CVE-2026-16100	A flaw was found in the user-event metrics recording of Keycloak	6.5 Moyenne	5 août 2026
CVE-2026-16071	A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external…	5.4 Moyenne	5 août 2026
CVE-2026-16102	A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management…	8.1 Élevée	5 août 2026
CVE-2026-15573	A flaw was found in Keycloak's Authorization Services	8.1 Élevée	5 août 2026
CVE-2026-16443	A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core…	7.4 Élevée	5 août 2026
CVE-2026-14615	A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative…	4.3 Moyenne	3 juil. 2026
CVE-2026-14614	A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP)…	5.4 Moyenne	3 juil. 2026
CVE-2026-4629	A flaw was found in Keycloak	6.5 Moyenne	30 juin 2026
CVE-2026-14209	A vulnerability was discovered in Keycloak's Admin UI extension that allows certain administrative users to bypass…	4.3 Moyenne	30 juin 2026
CVE-2026-54513	jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor	8.1 Élevée	23 juin 2026
CVE-2026-11986	A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface…	4.9 Moyenne	11 juin 2026
CVE-2026-40984	In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-40983	In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service…	7.5 Élevée	9 juin 2026
CVE-2026-9798	A flaw was found in Keycloak, an open-source identity and access management solution	4.3 Moyenne	28 mai 2026
CVE-2026-9793	A flaw was found in Keycloak	5.9 Moyenne	28 mai 2026
CVE-2026-9689	A flaw was found in Keycloak, an open-source identity and access management solution	4.2 Moyenne	27 mai 2026

Autres produits Red Hat