Red Hat Red Hat Single Sign-On 7.6.13

• CVE-2026-7507 High 7.5 Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover 0.8%
• CVE-2026-7307 High 7.5 Keycloak: keycloak: denial of service via specially crafted saml input 0.9%
• CVE-2026-4634 High 7.5 Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters 0.6%
• CVE-2026-2575 Medium 5.3 Keycloak: keycloak: denial of service due to excessive samlrequest decompression 0.7%
• CVE-2026-2092 High 7.7 Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions 0.4%
• CVE-2026-0603 High 8.3 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 1.0%
• CVE-2025-12543 Critical 9.6 Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 1.3%
• CVE-2025-9784 High 7.5 Undertow: undertow madeyoureset http/2 ddos vulnerability 2.3%