Product by Red Hat
Red Hat Build Of Keycloak 26.6.7
26 known vulnerabilities in Red Hat Build Of Keycloak 26.6.7 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-74909 | Red Hat: Missing Authorization | 8.1 | |
| High | CVE-2026-17615 | Resteasy-core: resteasy sourceprovider remote unauthenticated file read | 7.5 | |
| High | CVE-2026-79651 | Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching | 7.5 | |
| High | CVE-2026-18212 | Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state | 7.5 | |
| High | CVE-2026-17526 | Red Hat: Missing Authorization | 7.2 | |
| Medium | CVE-2026-19607 | Keycloak-services: keycloak-services: broker-originated username collision causes account lockout | 5.3 | |
| High | CVE-2026-18571 | Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation | 6.6 | |
| Medium | CVE-2026-19729 | Red Hat: Path Traversal | 4.9 | |
| Medium | CVE-2026-18573 | Red Hat: Missing Authorization | 6.5 | |
| High | CVE-2026-18215 | Red Hat: Improper Authentication | 6.8 | |
| High | CVE-2026-18214 | Red Hat: Missing Authorization | 6.8 | |
| Medium | CVE-2026-17059 | Red Hat: Authorization Bypass Through User-Controlled Key | 6.5 | |
| Medium | CVE-2026-18572 | Red Hat: Incorrect Authorization | 6.5 | |
| Medium | CVE-2026-79652 | Red Hat build of Keycloak 26.6: Missing Authorization | 5.9 | |
| Medium | CVE-2026-18201 | Red Hat: Missing Authorization | 5.5 | |
| Medium | CVE-2026-16105 | Red Hat: Authorization Bypass Through User-Controlled Key | 4.9 | |
| Medium | CVE-2026-16093 | Red Hat: Reliance on Untrusted Inputs in a Security Decision | 5.4 | |
| Medium | CVE-2026-16072 | Red Hat: Exposure of Sensitive System Information to an Unauthorized Control Sphere | 4.9 | |
| Medium | CVE-2026-16106 | Red Hat: Insufficient Granularity of Access Control | 4.9 | |
| Medium | CVE-2026-15945 | Red Hat: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2026-16104 | Red Hat: Improper Removal of Sensitive Information Before Storage or Transfer | 4.3 | |
| Medium | CVE-2026-18570 | Red Hat: Missing Authorization | 5.4 | |
| Medium | CVE-2026-16089 | Red Hat: External Control of Assumed-Immutable Web Parameter | 5.4 | |
| Medium | CVE-2026-16108 | Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2 | 4.3 | |
| Medium | CVE-2026-18209 | Red Hat: Improper Validation of Consistency within Input | 3.4 |