Red Hat Red Hat build of Keycloak 26.6.8
- CVE-2026-94218 Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication session restart endpoint 0.3%
- CVE-2026-18569 Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens 0.2%
- CVE-2026-18206 Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass 0.3%