Known vulnerabilities in Red Hat build of Keycloak 26.4.5 - page 2

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Version: 26.4.5
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 42
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak version 26.4.5 Red Hat build of Keycloak 26.4.5 is affected by 42 vulnerabilities: 13 medium, 29 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148978 - Out-of-bounds read
CVE-2026-9803		 CWE-125 Medium
No
No
 26.4.13, 26.6.3 11.09.2026 SB2026091122
SB2026091128
#VU148976 - Improper isolation or compartmentalization
CVE-2026-4325		 CWE-653 Medium
No
No
 26.2.15, 26.4.11 11.09.2026 SB2026091120
SB2026091121
#VU148971 - Incorrect Privilege Assignment
CVE-2025-13881		 CWE-266 Low
No
No
 26.4.9 11.09.2026 SB2026091119
#VU148939 - Improper isolation or compartmentalization
CVE-2026-4282		 CWE-653 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148938 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-3872		 CWE-601 Low
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148937 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVE-2026-4636		 CWE-551 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148936 - Excessive Platform Resource Consumption within a Loop
CVE-2026-4634		 CWE-1050 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148935 - Improper Access Control
CVE-2026-3429		 CWE-284 Low
No
No
 26.4.11 10.09.2026 SB2026091062
SB2026091121
#VU148934 - Improper Access Control
CVE-2025-14083		 CWE-284 Low
No
No
 26.4.11 10.09.2026 SB2026091062
SB2026091121
#VU148930 - Server-Side Request Forgery (SSRF)
CVE-2026-1180		 CWE-918 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148931 - Improper Privilege Management
CVE-2026-3121		 CWE-269 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148932 - Incorrect Authorization
CVE-2026-3190		 CWE-863 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148933 - Incorrect Authorization
CVE-2026-2366		 CWE-863 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148929 - Exposure of Private Information ('Privacy Violation')
CVE-2026-3911		 CWE-359 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148928 - Improper Access Control
CVE-2025-14082		 CWE-284 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148927 - Authorization Bypass Through User-Controlled Key
CVE-2025-14777		 CWE-639 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148926 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-1035		 CWE-367 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148917 - Incorrect Privilege Assignment
CVE-2025-14778		 CWE-266 Low
No
No
 26.2.13, 26.4.9 10.09.2026 SB2026091059
SB2026091060
SB2026091119
#VU148916 - Improperly Implemented Security Check for Standard
CVE-2026-1486		 CWE-358 Medium
No
No
 26.4.9 10.09.2026 SB2026091059
SB2026091119
#VU135692 - Insufficient Session Expiration
CVE-2026-9705		 CWE-613 Medium
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128


Showing elements 21 - 40 out of 42