Red Hat Red Hat build of Keycloak 26.6.5

• CVE-2026-15572 High 8.8 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation 0.7%
• CVE-2026-16442 High 7.4 Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction 0.3%
• CVE-2026-16100 Medium 6.5 Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text 0.6%
• CVE-2026-16071 Medium 5.4 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary 0.3%
• CVE-2026-16102 High 8.1 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers 0.5%
• CVE-2026-15573 High 8.1 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher 0.5%
• CVE-2026-16443 High 7.4 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation 0.3%
• CVE-2026-14615 Medium 4.3 Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter 0.4%
• CVE-2026-14614 Medium 5.4 Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource 0.3%
• CVE-2026-4629 Medium 6.5 Keycloak: keycloak: privilege escalation through hardcoded role mapper injection 0.5%
• CVE-2026-14209 Medium 4.3 Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictions 0.4%
• CVE-2026-11986 Medium 4.9 Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak 0.3%
• CVE-2026-9798 Medium 4.3 Keycloak: keycloak: brute-force protection bypass in ciba flow 0.4%
• CVE-2026-9793 Medium 5.9 Keycloak: keycloak: security policy bypass in jwe-encrypted request object processing 0.2%
• CVE-2026-9689 Medium 4.2 Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows response parameter duplication - #ghi-604 0.3%