Product by Open Source
Keycloak Red Hat Build Of Keycloa
7 known vulnerabilities in Keycloak Red Hat Build Of Keycloa (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-15572 | Red Hat build of Keycloak: Type Confusion | 8.8 | |
| High | CVE-2026-15573 | Red Hat: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 8.1 | |
| High | CVE-2026-16102 | Red Hat: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 8.1 | |
| Medium | CVE-2026-16100 | Red Hat: Allocation of Resources Without Limits or Throttling | 6.5 | |
| Critical | CVE-2026-16442 | Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction | 7.4 | |
| High | CVE-2026-18967 | Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow | 6.4 | |
| Medium | CVE-2026-16071 | Red Hat: LDAP Injection | 5.4 |