Red Hat Red Hat build of Keycloak 26.4.9

• CVE-2026-0871 Medium 4.9 Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators 0.3%
• CVE-2025-14778 Medium 5.4 Keycloak: incorrect ownership checks in /uma-policy/ 0.3%
• CVE-2026-1529 High 8.1 Org.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validation 0.5%
• CVE-2026-1486 High 8.8 Org.keycloak.protocol.oidc.grants: disabled identity providers are still accepted for jwt authorization grant 0.5%
• CVE-2025-13881 Low 2.7 Org.keycloak.services.resources.admin: keycloak: limited administrator can retrieve sensitive user attributes via admin api 0.4%
• CVE-2025-14559 Medium 6.5 Org.keycloak/keycloak-services: keycloak keycloak-services: business logic flaw allows unauthorized token issuance for disabled users 0.5%
• CVE-2026-0976 Low 3.7 Org.keycloak/keycloak-quarkus-server: keycloak: proxy bypass due to improper handling of matrix parameters in url paths 0.5%