Known vulnerabilities in Red Hat build of Keycloak 26.2.2

Vendor: Red Hat Inc.

Software: Red Hat build of Keycloak

Version: 26.2.2

Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU148976 - Improper isolation or compartmentalization CVE-2026-4325	CWE-653	Medium	No	No	26.2.15, 26.4.11	11.09.2026	SB2026091120 SB2026091121
#VU148939 - Improper isolation or compartmentalization CVE-2026-4282	CWE-653	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148938 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-3872	CWE-601	Low	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148937 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization CVE-2026-4636	CWE-551	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU148936 - Excessive Platform Resource Consumption within a Loop CVE-2026-4634	CWE-1050	Medium	No	No	26.2.15, 26.4.11	10.09.2026	SB2026091062 SB2026091120 SB2026091121
#VU116860 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2025-10044	CWE-451	Low	No	No	26.0.17, 26.2.9	09.10.2025	SB2025100922 SB2025110744 SB2025110745 and 1 more
#VU115002 - Improper input validation CVE-2025-9162	CWE-20	Low	No	No	26.0.15, 26.2.8, 26.2.9	09.09.2025	SB2025090931 SB2025090932 SB2025090933 and 3 more