Red Hat Red Hat build of Keycloak 26.2.16
- CVE-2026-7507 Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover 0.8%
- CVE-2026-7504 Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak 0.5%
- CVE-2026-7307 Keycloak: keycloak: denial of service via specially crafted saml input 0.9%