Known vulnerabilities in Red Hat build of Keycloak

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 153
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 153 known vulnerabilities: 1 critical, 10 high, 63 medium, 79 low Critical High Medium Low

Vulnerabilities (153)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148994 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-9796		 CWE-367 Low
No
No
 26.6.6 11.09.2026 SB2026091144
#VU148992 - Improper Verification of Cryptographic Signature
CVE-2026-9793		 CWE-347 Medium
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148993 - Authentication Bypass by Primary Weakness
CVE-2026-9798		 CWE-305 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148987 - Direct Request ('Forced Browsing')
CVE-2026-11986		 CWE-425 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148988 - Authorization Bypass Through User-Controlled Key
CVE-2026-14209		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148989 - Authorization Bypass Through User-Controlled Key
CVE-2026-14614		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148990 - Insufficient Granularity of Access Control
CVE-2026-14615		 CWE-1220 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148991 - Improper Validation of Consistency within Input
CVE-2026-9689		 CWE-1288 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148959 - Predictable from Observable State
CVE-2026-15571		 CWE-341 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148958 - Exposure of sensitive information to an unauthorized actor
CVE-2026-17048		 CWE-200 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148956 - Insufficient Granularity of Access Control
CVE-2026-14613		 CWE-1220 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU146375 - Improper input validation
CVE-2026-40983		 CWE-20 Medium
No
No
 26.6.5 31.08.2026 SB2026083148
SB2026083156
SB2026083157
and 8 more
#VU146047 - Allocation of Resources Without Limits or Throttling
CVE-2026-16308		 CWE-770 Medium
No
No
 26.6.5 28.08.2026 SB2026082831
SB2026091143
#VU141174 - Improper Authorization
CVE-2026-15573		 CWE-285 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141173 - Type confusion
CVE-2026-15572		 CWE-843 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141172 - Resource exhaustion
CVE-2026-16100		 CWE-400 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141171 - Origin Validation Error
CVE-2026-16442		 CWE-346 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141170 - Improper Verification of Cryptographic Signature
CVE-2026-16443		 CWE-347 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141169 - Improper input validation
CVE-2026-16071		 CWE-20 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141168 - Improper input validation
CVE-2026-16102		 CWE-20 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143


Showing elements 1 - 20 out of 153