Red Hat Red Hat build of Keycloak 26.4.16

• CVE-2026-19607 Medium 5.3 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout 0.7%
• CVE-2026-17526 High 7.2 Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts 0.6%
• CVE-2026-79651 High 7.5 Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching 0.8%
• CVE-2026-74909 High 8.1 Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments 0.8%
• CVE-2026-18212 High 7.5 Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state 0.7%
• CVE-2026-19729 Medium 4.9 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters 0.6%