Known vulnerabilities in Red Hat build of Keycloak 26.6.0 - page 2

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Version: 26.6.0
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 46
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak version 26.6.0 Red Hat build of Keycloak 26.6.0 is affected by 46 vulnerabilities: 2 high, 18 medium, 26 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148980 - Allocation of Resources Without Limits or Throttling
CVE-2026-6860		 CWE-770 Medium
No
No
 26.4.13, 26.6.4 11.09.2026 SB2026091123
SB2026091128
#VU148978 - Out-of-bounds read
CVE-2026-9803		 CWE-125 Medium
No
No
 26.4.13, 26.6.3 11.09.2026 SB2026091122
SB2026091128
#VU146997 - Missing Authorization
CVE-2026-9088		 CWE-862 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146995 - Improper Validation of Specified Quantity in Input
CVE-2026-9704		 CWE-1284 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146994 - Improper Validation of Specified Quantity in Input
CVE-2026-9801		 CWE-1284 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146992 - Incorrect Authorization
CVE-2026-9791		 CWE-863 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146991 - Insufficient Session Expiration
CVE-2026-9802		 CWE-613 Medium
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146990 - Authorization Bypass Through User-Controlled Key
CVE-2026-9087		 CWE-639 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146376 - Improper input validation
CVE-2026-40984		 CWE-20 Medium
No
No
 26.6.5 31.08.2026 SB2026083148
SB2026083155
SB2026083156
and 5 more
#VU146375 - Improper input validation
CVE-2026-40983		 CWE-20 Medium
No
No
 26.6.5 31.08.2026 SB2026083148
SB2026083156
SB2026083157
and 8 more
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 26.6.5 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 30 more
#VU146983 - Information Exposure Through an Error Message
CVE-2026-9794		 CWE-209 Medium
No
No
 26.4.13, 26.6.3 01.07.2026 SB2026090517
SB2026091122
SB2026091128
#VU135697 - Authorization Bypass Through User-Controlled Key
CVE-2026-9099		 CWE-639 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135696 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-9083		 CWE-22 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135693 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-9086		 CWE-79 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135692 - Insufficient Session Expiration
CVE-2026-9705		 CWE-613 Medium
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135691 - Incorrect Privilege Assignment
CVE-2026-9795		 CWE-266 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135690 - Authorization Bypass Through User-Controlled Key
CVE-2026-9799		 CWE-639 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135688 - Comparison using wrong factors
CVE-2026-9800		 CWE-1025 Medium
No
No
 26.4.13, 26.6.4 29.06.2026 SB2025031143
SB2026083155
SB2026083156
and 1 more
#VU135687 - Improper Verification of Cryptographic Signature
CVE-2026-11800		 CWE-347 Medium
No
No
 26.6.4 29.06.2026 SB2026062907
SB2026091128


Showing elements 21 - 40 out of 46