VendorsRed Hatbuild_of_keycloakany version

Vulnerabilities

Red Hat Build any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

110CVEs

CVE-2026-16100

Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text

Published 2026-08-05 · Modified

6.5EPSS 0.006

CVE-2026-4629

Keycloak: keycloak: privilege escalation through hardcoded role mapper injection

Published 2026-06-30 · Modified

6.5EPSS 0.005

CVE-2026-18573

Keycloak-services: keycloak-services: client access-type policy condition bypass during client update

Published 2026-08-02 · Modified

6.5EPSS 0.005

CVE-2026-9792

Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition

Published 2026-05-28 · Modified

6.5EPSS 0.005

CVE-2026-9705

Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token

Published 2026-06-25 · Analyzed

6.5EPSS 0.005

CVE-2026-16104

Keycloak-services: keycloak-services: authenticator config endpoint exposes raw recaptcha secrets to view-only admins

Published 2026-07-17 · Modified

6.5EPSS 0.005

CVE-2026-37979

Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass

Published 2026-05-19 · Analyzed

6.5EPSS 0.004

CVE-2026-17059

Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter

Published 2026-07-24 · Modified

6.5EPSS 0.004

CVE-2026-12388

Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper

Published 2026-06-30 · Analyzed

6.5EPSS 0.004

CVE-2025-7784

Org.keycloak/keycloak-services: privilege escalation in keycloak admin console (fgapv2 enabled)

Published 2025-07-18 · Modified

6.5EPSS 0.004

CVE-2026-18572

Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes

Published 2026-08-02 · Modified

6.5EPSS 0.004

CVE-2026-9796

Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability

Published 2026-05-28 · Modified

6.5EPSS 0.004

CVE-2026-16108

Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2

Published 2026-07-17 · Modified

6.5EPSS 0.004

CVE-2026-18208

Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim

Published 2026-07-31 · Analyzed

6.5EPSS 0.003

CVE-2026-18207

Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching

Published 2026-07-29 · Analyzed

6.5EPSS 0.003

CVE-2026-18203

Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes

Published 2026-07-31 · Analyzed

6.5EPSS 0.003

CVE-2024-8883

Keycloak: vulnerable redirect uri validation results in open redirec

Published 2024-09-19 · Modified

6.1EPSS 0.021

CVE-2024-7260

Keycloak-core: open redirect on account page

Published 2024-09-09 · Modified

6.1EPSS 0.006

CVE-2026-16089

Keycloak-services: keycloak-services: authorization codes can be retargeted to another client session

Published 2026-07-17 · Modified

5.9EPSS 0.003

CVE-2026-4366

Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak

Published 2026-03-18 · Modified

5.8EPSS 0.004

CVE-2026-17048

Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api

Published 2026-07-24 · Modified

5.5EPSS 0.004

CVE-2026-18201

Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations

Published 2026-07-29 · Modified

5.5EPSS 0.004

CVE-2026-15943

Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change

Published 2026-07-17 · Analyzed

5.5EPSS 0.003

CVE-2025-3910

Org.keycloak.authentication: two factor authentication bypass

Published 2025-04-29 · Analyzed

5.4EPSS 0.004

CVE-2026-16093

Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers

Published 2026-07-17 · Modified

5.4EPSS 0.004

CVE-2026-8922

Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services

Published 2026-05-19 · Modified

5.4EPSS 0.003

CVE-2026-7500

Org.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabled

Published 2026-04-30 · Modified

5.4EPSS 0.003

CVE-2026-14614

Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource

Published 2026-07-03 · Analyzed

5.4EPSS 0.003

CVE-2026-16071

Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary

Published 2026-08-05 · Modified

5.4EPSS 0.003

CVE-2026-18211

Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains

Published 2026-07-31 · Analyzed

5.4EPSS 0.003

CVE-2026-18570

Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed

Published 2026-08-02 · Modified

5.4EPSS 0.003

CVE-2026-18218

Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero

Published 2026-07-31 · Modified

5.4EPSS 0.003

CVE-2026-9803

Keycloak: keycloak: denial of service via malformed authorization header

Published 2026-05-28 · Modified

5.3EPSS 0.007

CVE-2026-2575

Keycloak: keycloak: denial of service due to excessive samlrequest decompression

Published 2026-03-18 · Analyzed

5.3EPSS 0.007

CVE-2026-9794

Keycloak: keycloak: information disclosure via saml ecp endpoint

Published 2026-05-28 · Modified

5.3EPSS 0.006

CVE-2026-4325

Keycloak: keycloak: replay of action tokens via improper handling of single-use entries

Published 2026-04-02 · Analyzed

5.3EPSS 0.004

CVE-2026-37977

Keycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claim

Published 2026-04-06 · Modified

5.3EPSS 0.003

CVE-2026-9801

Keycloak: keycloak: denial of service via malformed ldap password policy response

Published 2026-05-28 · Modified

4.9EPSS 0.009

CVE-2026-9083

Keycloak: keycloak: information disclosure through arbitrary filesystem path probing

Published 2026-06-25 · Analyzed

4.9EPSS 0.008

CVE-2026-37978

Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api

Published 2026-05-19 · Analyzed

4.9EPSS 0.005

Red Hat Build any version

Security check