VendorsRed Hatbuild_of_keycloak26.2
Vulnerabilities

Red Hat Build 26.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2026-3047
Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login
Published 2026-03-05 · Modified
8.8EPSS 0.005
CVE-2026-4636
Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.
Published 2026-04-02 · Modified
8.1EPSS 0.003
CVE-2026-4634
Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters
Published 2026-04-02 · Modified
7.5EPSS 0.005
CVE-2026-4282
Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw
Published 2026-04-02 · Modified
7.4EPSS 0.004
CVE-2026-3872
Keycloak: keycloak: information disclosure due to redirect_uri validation bypass
Published 2026-04-02 · Modified
7.3EPSS 0.004
CVE-2026-4325
Keycloak: keycloak: replay of action tokens via improper handling of single-use entries
Published 2026-04-02 · Analyzed
5.3EPSS 0.003