Known vulnerabilities in Red Hat build of Keycloak

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 161
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 161 known vulnerabilities: 1 critical, 11 high, 69 medium, 80 low Critical High Medium Low

Vulnerabilities (161)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150839 - Missing release of memory after effective lifetime
CVE-2026-18212		 CWE-401 Medium
No
No
 26.4.16 18.09.2026 SB2026091847
SB20260921141
#VU150838 - Missing Authorization
CVE-2026-17526		 CWE-862 Low
No
No
 26.4.16 18.09.2026 SB2026091847
SB20260921141
#VU150837 - Improper Authentication
CVE-2026-19607		 CWE-287 Medium
No
No
 26.4.16 18.09.2026 SB2026091847
SB20260921141
#VU150836 - Missing Authorization
CVE-2026-74909		 CWE-862 Medium
No
No
 26.4.16 18.09.2026 SB2026091847
SB20260921141
#VU150835 - Resource exhaustion
CVE-2026-79651		 CWE-400 Medium
No
No
 26.4.16 18.09.2026 SB2026091847
SB20260921141
#VU148994 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-9796		 CWE-367 Low
No
No
 26.6.6 11.09.2026 SB2026091144
#VU148992 - Improper Verification of Cryptographic Signature
CVE-2026-9793		 CWE-347 Medium
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148993 - Authentication Bypass by Primary Weakness
CVE-2026-9798		 CWE-305 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148987 - Direct Request ('Forced Browsing')
CVE-2026-11986		 CWE-425 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148988 - Authorization Bypass Through User-Controlled Key
CVE-2026-14209		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148989 - Authorization Bypass Through User-Controlled Key
CVE-2026-14614		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148990 - Insufficient Granularity of Access Control
CVE-2026-14615		 CWE-1220 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148991 - Improper Validation of Consistency within Input
CVE-2026-9689		 CWE-1288 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148959 - Predictable from Observable State
CVE-2026-15571		 CWE-341 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148958 - Exposure of sensitive information to an unauthorized actor
CVE-2026-17048		 CWE-200 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148956 - Insufficient Granularity of Access Control
CVE-2026-14613		 CWE-1220 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU146984 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-19729		 CWE-22 Medium
No
No
 26.4.16 05.09.2026 SB2026090518
SB20260921141
#VU146635 - Weak password recovery mechanism
CVE-2026-18963		 CWE-640 High
Available
No
 26.4.15, 26.6.6 01.09.2026 SB2026090152
SB2026090158
SB2026090159
and 2 more
#VU141317 - Improper Validation of Certificate with Host Mismatch
CVE-2026-62243		 CWE-297 Medium
No
No
 26.4.16 08.08.2026 SB2026080807
SB2026091654
SB20260921141
and 1 more
#VU141174 - Improper Authorization
CVE-2026-15573		 CWE-285 Medium
No
No
 26.4.16, 26.6.5 06.08.2026 SB20260806121
SB2026091143
SB20260921141


Showing elements 1 - 20 out of 161