Skip to content
Red Hat Red Hat build of Keycloak 26.6.4
-
CVE-2026-11800
High 8.1
Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion
0.3%
-
CVE-2026-9083
Medium 4.9
Keycloak: keycloak: information disclosure through arbitrary filesystem path probing
0.8%
-
CVE-2026-9799
Medium 4.6
Keycloak: keycloak: unauthorized access to resources via uma permission ticket bypass
0.3%
-
CVE-2026-9705
Medium 6.5
Keycloak: keycloak: attacker can re-enable and take over disabled clients via registration access token
0.5%
-
CVE-2026-9086
High 7.3
Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass
0.8%
-
CVE-2026-9099
High 7.7
Keycloak: group-admin escalation to realm-admin
0.5%
-
CVE-2026-9800
High 8.1
Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison
0.7%
-
CVE-2026-9795
High 7.3
Keycloak: keycloak: privilege escalation via improper scope mapping enforcement
0.4%