Red Hat Red Hat build of Keycloak 26.4.4

• CVE-2025-12150 Low 3.1 Org.keycloak/keycloak-services: webauthn attestation statement verification bypass 0.2%
• CVE-2025-11538 Medium 6.8 Keycloak-server: debug default bind address 0.4%
• CVE-2025-12390 Medium 6.0 Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id 0.1%
• CVE-2025-10939 Low 3.7 Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console 0.4%
• CVE-2025-12110 Medium 5.4 Keycloak: org.keycloak:keycloak-services: user can refresh offline session even after client's offline_access scope was removed 0.3%