Known vulnerabilities in Red Hat build of Keycloak 26.2.12

Vendor: Red Hat Inc.

Software: Red Hat build of Keycloak

Version: 26.2.12

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 5

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU148976 - Improper isolation or compartmentalization CVE-2026-4325	CWE-653	Medium	No	No	26.2.15, 26.4.11	11.09.2026	SB2026091120 SB2026091121
#VU148939 - Improper isolation or compartmentalization CVE-2026-4282	CWE-653	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148938 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-3872	CWE-601	Low	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148937 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization CVE-2026-4636	CWE-551	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148936 - Excessive Platform Resource Consumption within a Loop CVE-2026-4634	CWE-1050	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121