Known vulnerabilities in Red Hat build of Keycloak 26.6.2

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Version: 26.6.2
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 46
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak version 26.6.2 Red Hat build of Keycloak 26.6.2 is affected by 46 vulnerabilities: 2 high, 18 medium, 26 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148994 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-9796		 CWE-367 Low
No
No
 26.6.6 11.09.2026 SB2026091144
#VU148992 - Improper Verification of Cryptographic Signature
CVE-2026-9793		 CWE-347 Medium
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148993 - Authentication Bypass by Primary Weakness
CVE-2026-9798		 CWE-305 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148987 - Direct Request ('Forced Browsing')
CVE-2026-11986		 CWE-425 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148988 - Authorization Bypass Through User-Controlled Key
CVE-2026-14209		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148989 - Authorization Bypass Through User-Controlled Key
CVE-2026-14614		 CWE-639 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148990 - Insufficient Granularity of Access Control
CVE-2026-14615		 CWE-1220 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148991 - Improper Validation of Consistency within Input
CVE-2026-9689		 CWE-1288 Low
No
No
 26.6.5 11.09.2026 SB2026091143
#VU148959 - Predictable from Observable State
CVE-2026-15571		 CWE-341 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148958 - Exposure of sensitive information to an unauthorized actor
CVE-2026-17048		 CWE-200 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU148956 - Insufficient Granularity of Access Control
CVE-2026-14613		 CWE-1220 Low
No
No
 26.6.6 10.09.2026 SB2026090152
SB2026091076
SB2026091144
#VU146635 - Weak password recovery mechanism
CVE-2026-18963		 CWE-640 High
Public exploit available
No
 26.4.15, 26.6.6 01.09.2026 SB2026090152
SB2026090158
SB2026090159
and 2 more
#VU146047 - Allocation of Resources Without Limits or Throttling
CVE-2026-16308		 CWE-770 Medium
No
No
 26.6.5 28.08.2026 SB2026082831
SB2026091143
#VU141174 - Improper Authorization
CVE-2026-15573		 CWE-285 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141173 - Type confusion
CVE-2026-15572		 CWE-843 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141172 - Resource exhaustion
CVE-2026-16100		 CWE-400 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141171 - Origin Validation Error
CVE-2026-16442		 CWE-346 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141170 - Improper Verification of Cryptographic Signature
CVE-2026-16443		 CWE-347 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141169 - Improper input validation
CVE-2026-16071		 CWE-20 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141168 - Improper input validation
CVE-2026-16102		 CWE-20 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143


Showing elements 1 - 20 out of 46