Known vulnerabilities in Red Hat build of Keycloak - page 4

Vendor: Red Hat Inc.
Software: Red Hat build of Keycloak
Software CPE: cpe:2.3:a:red_hat:red_hat_build_of_keycloak:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 161
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat build of Keycloak Red Hat build of Keycloak is affected by 161 known vulnerabilities: 1 critical, 11 high, 69 medium, 80 low Critical High Medium Low

Vulnerabilities (161)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148976 - Improper isolation or compartmentalization
CVE-2026-4325		 CWE-653 Medium
No
No
 26.2.15, 26.4.11 11.09.2026 SB2026091120
SB2026091121
#VU148972 - Incorrect Privilege Assignment
CVE-2026-0871		 CWE-266 Low
No
No
 26.4.9 11.09.2026 SB2026091119
#VU148971 - Incorrect Privilege Assignment
CVE-2025-13881		 CWE-266 Low
No
No
 26.4.9 11.09.2026 SB2026091119
#VU148952 - Authorization Bypass Through User-Controlled Key
CVE-2026-37978		 CWE-639 Low
No
No
 26.4.12 10.09.2026 SB2026091072
SB2026091075
#VU148950 - Authentication Bypass by Capture-replay
CVE-2026-37982		 CWE-294 Medium
No
No
 26.4.12 10.09.2026 SB2026091072
SB2026091075
#VU148946 - Improper Validation of Syntactic Correctness of Input
CVE-2026-7307		 CWE-1286 Medium
No
No
 26.2.16, 26.4.12 10.09.2026 SB2026091072
SB2026091074
SB2026091075
#VU148939 - Improper isolation or compartmentalization
CVE-2026-4282		 CWE-653 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148938 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-3872		 CWE-601 Low
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148937 - Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVE-2026-4636		 CWE-551 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148936 - Excessive Platform Resource Consumption within a Loop
CVE-2026-4634		 CWE-1050 Medium
No
No
 26.2.15, 26.4.11 10.09.2026 SB2026091062
SB2026091120
SB2026091121
#VU148931 - Improper Privilege Management
CVE-2026-3121		 CWE-269 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148933 - Incorrect Authorization
CVE-2026-2366		 CWE-863 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148929 - Exposure of Private Information ('Privacy Violation')
CVE-2026-3911		 CWE-359 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148928 - Improper Access Control
CVE-2025-14082		 CWE-284 Low
No
No
 26.4.11 10.09.2026 SB2026091061
SB2026091121
#VU148917 - Incorrect Privilege Assignment
CVE-2025-14778		 CWE-266 Low
No
No
 26.2.13, 26.4.9 10.09.2026 SB2026091059
SB2026091060
SB2026091119
#VU148916 - Improperly Implemented Security Check for Standard
CVE-2026-1486		 CWE-358 Medium
No
No
 26.4.9 10.09.2026 SB2026091059
SB2026091119
#VU148915 - Improper Verification of Cryptographic Signature
CVE-2026-1529		 CWE-347 Medium
No
No
 26.2.13, 26.4.9 10.09.2026 SB2026091059
SB2026091060
SB2026091119
#VU148914 - Incorrect Authorization
CVE-2025-14559		 CWE-863 Low
No
No
 26.4.9 10.09.2026 SB2026091058
SB2026091119
#VU116860 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-10044		 CWE-451 Low
No
No
 26.0.17, 26.2.9 09.10.2025 SB2025100922
SB2025110744
SB2025110745
and 1 more
#VU115002 - Improper input validation
CVE-2025-9162		 CWE-20 Low
No
No
 26.0.15, 26.2.8, 26.2.9 09.09.2025 SB2025090931
SB2025090932
SB2025090933
and 3 more


Showing elements 61 - 80 out of 161