Known vulnerabilities in Red Hat build of Keycloak - page 2

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 161
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 161 known vulnerabilities: 1 critical, 11 high, 69 medium, 80 low Critical High Medium Low

Vulnerabilities (161)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146996 - Improper Handling of Insufficient Permissions or Privileges
CVE-2026-9792		 CWE-280 Medium
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146995 - Improper Validation of Specified Quantity in Input
CVE-2026-9704		 CWE-1284 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146994 - Improper Validation of Specified Quantity in Input
CVE-2026-9801		 CWE-1284 Low
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146991 - Insufficient Session Expiration
CVE-2026-9802		 CWE-613 Medium
No
No
 26.4.13, 26.6.3 05.09.2026 SB2026090517
SB2026091122
SB2026091128
#VU146376 - Improper input validation
CVE-2026-40984		 CWE-20 Medium
No
No
 26.6.5 31.08.2026 SB2026083148
SB2026083155
SB2026083156
and 7 more
#VU146375 - Improper input validation
CVE-2026-40983		 CWE-20 Medium
No
No
 26.6.5 31.08.2026 SB2026083148
SB2026083156
SB2026083157
and 9 more
#VU146047 - Allocation of Resources Without Limits or Throttling
CVE-2026-16308		 CWE-770 Medium
No
No
 26.6.5 28.08.2026 SB2026082831
SB2026091143
#VU141173 - Type confusion
CVE-2026-15572		 CWE-843 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141172 - Resource exhaustion
CVE-2026-16100		 CWE-400 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141171 - Origin Validation Error
CVE-2026-16442		 CWE-346 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141170 - Improper Verification of Cryptographic Signature
CVE-2026-16443		 CWE-347 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141169 - Improper input validation
CVE-2026-16071		 CWE-20 Low
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU141168 - Improper input validation
CVE-2026-16102		 CWE-20 Medium
No
No
 26.6.5 06.08.2026 SB20260806121
SB2026091143
#VU139159 - Deserialization of Untrusted Data
CVE-2026-54512		 CWE-502 High
No
No
 26.6.5 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 36 more
#VU139158 - Incomplete List of Disallowed Inputs
CVE-2026-54513		 CWE-184 High
No
No
 26.6.5 22.07.2026 SB2026072278
SB2026072282
SB2026072283
and 38 more
#VU146983 - Information Exposure Through an Error Message
CVE-2026-9794		 CWE-209 Medium
No
No
 26.4.13, 26.6.3 01.07.2026 SB2026090517
SB2026091122
SB2026091128
#VU135692 - Insufficient Session Expiration
CVE-2026-9705		 CWE-613 Medium
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135691 - Incorrect Privilege Assignment
CVE-2026-9795		 CWE-266 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135690 - Authorization Bypass Through User-Controlled Key
CVE-2026-9799		 CWE-639 Low
No
No
 26.4.13, 26.6.4 29.06.2026 SB2026062907
SB2026091128
#VU135688 - Comparison using wrong factors
CVE-2026-9800		 CWE-1025 Medium
No
No
 26.4.13, 26.6.4 29.06.2026 SB2025031143
SB2026083155
SB2026083156
and 1 more


Showing elements 21 - 40 out of 161