Red Hat build of Keycloak 26.4 vulnerabilities and CVEs
Known vulnerabilities affecting Red Hat build of Keycloak 26.4, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.
30 vulnerabilities tracked.
- 8.2 A flaw was found in Netty.
- 8.1 Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications.
- 8.1 A flaw was found in the UserManagedPermissionService of the Keycloak authorization server.
- 8.0 A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line.
- 7.5 A flaw was found in the SAML implementation of Keycloak, an open-source identity and access management solution.
- 7.5 A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management.
- 7.5 A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution.
- 7.5 A flaw was found in the authentication session handling of the keycloak-services component in Keycloak.
- 7.5 A flaw was found in Netty.
- 7.5 A flaw was found in Netty's HTTP/2 codec.
- 7.5 A flaw was found in Netty RtspDecoder.
- 7.5 A flaw was found in Netty.
- 7.5 A flaw was found in Netty's WebSocketServerExtensionHandler.
- 7.5 A flaw was found in Netty's HttpServerCodec.
- 7.5 A flaw was found in Netty.
- 7.4 A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based authentication.
- 7.4 A flaw was found in the SAML identity broker component of Keycloak, which is used to delegate authentication to external identity providers.
- 7.4 A flaw was found in WildFly Elytron.
- 7.1 A flaw was found in the protocol mapper and identity resolution components of Keycloak.
- 6.5 A flaw was found in the token sanitization logic of Keycloak, an open source identity and access management solution.
- 6.5 A flaw was found in the Dynamic Client Registration component of Keycloak, an open-source identity and access management solution.
- 6.5 A flaw was found in Netty's HTTP/1 decoder.
- 6.5 A flaw was found in Netty's netty-codec-http component.
- 6.5 A flaw was found in Netty's HTTP/2 stack.
- 6.5 A flaw was found in Netty's HTTP/1.1 decoder.
- 6.5 A flaw was found in Netty.
- 6.4 A flaw was found in the Keycloak Account REST API where it incorrectly handles session identification.
- 5.3 A flaw was found in Netty's HTTP/2 HpackEncoder.
- 4.9 A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak.
- 3.4 A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Red Hat build of Keycloak 26.4 is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other products tracked here
Linux Red Hat Enterprise Linux 9 Chrome Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 macOS Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Zephyr Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 7 Extended Lifecycle Support Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Windows Server 2022 iOS and iPadOS Windows 11 version 26H1 Windows 11 Version 24H2 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows 11 Version 25H2 Windows Server 2019 (Server Core installation)