Red Hat Red Hat build of Keycloak 26.4

• CVE-2026-19607 Medium 5.3 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout 0.7%
• CVE-2026-17526 High 7.2 Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts 0.6%
• CVE-2026-79651 High 7.5 Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching 0.8%
• CVE-2026-74909 High 8.1 Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments 0.8%
• CVE-2026-18212 High 7.5 Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state 0.7%
• CVE-2026-19729 Medium 4.9 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters 0.6%
• CVE-2026-18963 Critical 9.1 Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass 4.7%
• CVE-2026-15572 High 8.8 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation 0.7%
• CVE-2026-16442 High 7.4 Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction 0.3%
• CVE-2026-16071 Medium 5.4 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary 0.3%
• CVE-2026-16102 High 8.1 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers 0.5%
• CVE-2026-15573 High 8.1 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher 0.5%
• CVE-2026-16443 High 7.4 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation 0.3%
• CVE-2026-14615 Medium 4.3 Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter 0.4%
• CVE-2026-14614 Medium 5.4 Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource 0.3%
• CVE-2026-4629 Medium 6.5 Keycloak: keycloak: privilege escalation through hardcoded role mapper injection 0.5%
• CVE-2026-14209 Medium 4.3 Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions 0.4%
• CVE-2026-9083 Medium 4.9 Keycloak: keycloak: information disclosure through arbitrary filesystem path probing 0.8%
• CVE-2026-9799 Medium 4.6 Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass 0.3%
• CVE-2026-9705 Medium 6.5 Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token 0.5%
• CVE-2026-9086 High 7.3 Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass 0.8%
• CVE-2026-9099 High 7.7 Keycloak: group-admin escalation to realm-admin 0.5%
• CVE-2026-9800 High 8.1 Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison 0.7%
• CVE-2026-9088 Low 2.7 Keycloak: keycloak: information disclosure due to user profile permission bypass 0.3%
• CVE-2026-9802 Medium 6.8 Keycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart 0.3%
• CVE-2026-9803 Medium 5.3 Keycloak: keycloak: denial of service via malformed authorization header 0.4%
• CVE-2026-9801 Medium 4.9 Keycloak: keycloak: denial of service via malformed ldap password policy response 0.5%
• CVE-2026-9798 Medium 4.3 Keycloak: keycloak: brute-force protection bypass in ciba flow 0.4%
• CVE-2026-9795 High 7.3 Keycloak: keycloak: privilege escalation via improper scope mapping enforcement 0.4%
• CVE-2026-9794 Medium 5.3 Keycloak: keycloak: information disclosure via saml ecp endpoint 0.4%
• CVE-2026-9792 Medium 6.5 Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition 0.3%
• CVE-2026-9793 Medium 5.9 Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing 0.2%
• CVE-2026-9791 Medium 4.3 Keycloak-rhel9: organization data leak after feature disabled in keycloak 0.2%
• CVE-2026-9704 Medium 6.8 Keycloak: keycloak: privilege escalation due to oversized subject_token jwt 0.3%
• CVE-2026-9689 Medium 4.2 Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604 0.3%
• CVE-2026-9087 Medium 6.4 Keycloak: cross-session email verification proof not bound to upstream identity in first-broker-login 0.3%
• CVE-2026-7571 High 7.1 Keycloak: keycloak: access token disclosure and implicit flow bypass via forged client data 0.4%
• CVE-2026-7507 High 7.5 Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover 0.8%
• CVE-2026-7504 High 8.1 Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak 0.5%
• CVE-2026-37982 Medium 6.8 Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay 0.4%
• CVE-2026-37979 Medium 6.5 Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass 0.4%
• CVE-2026-37978 Medium 4.9 Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api 0.4%
• CVE-2026-7307 High 7.5 Keycloak: keycloak: denial of service via specially crafted saml input 0.9%
• CVE-2026-37981 Medium 4.3 Keycloak: org.keycloak.authorization: keycloak: information disclosure via broken access control in user lookup endpoint 0.4%
• CVE-2026-4630 Medium 6.8 Keycloak: keycloak: unauthorized resource access and data modification via insecure direct object reference 0.3%
• CVE-2026-8922 Medium 5.4 Org.keycloak/keycloak-services: keycloak: org.keycloak.protocol.oidc: security flaw in org.keycloak/keycloak-services 0.3%
• CVE-2026-8830 Medium 4.3 Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulation 0.4%
• CVE-2026-7500 Medium 5.4 Org.keycloak.keycloak-services: improper access control on keycloak server when the account account api feature is disabled 0.2%
• CVE-2026-37977 Low 3.7 Keycloak: org.keycloak.protocol.oidc.grants.ciba: keycloak: information disclosure via cors header injection due to unvalidated jwt azp claim 0.3%
• CVE-2026-4636 High 8.1 Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. 0.4%