CVE-2026-2575Medium 5.3Keycloak: keycloak: denial of service due to excessive samlrequest decompression0.7%
CVE-2026-2603High 8.1Keycloak: keycloak: unauthorized authentication via disabled saml identity provider0.5%
CVE-2026-2092High 7.7Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions0.4%
CVE-2026-3047High 8.8Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login0.5%
CVE-2026-3009High 8.1Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)0.4%
CVE-2026-2733Low 3.8Org.keycloak/keycloak-services: keycloak: missing check on disabled client for docker registry protocol0.4%
CVE-2026-1190Low 3.1Org.keycloak/keycloak-services: keycloak saml brokering: response delay due to unchecked notonorafter in subjectconfirmationdata0.4%
CVE-2026-0707Medium 5.3Keycloak: keycloak authorization header parsing leading to potential security control bypass0.4%