Redhat Build of Keycloak vulnerabilities
111 published vulnerabilities in Redhat Build of Keycloak. The most were published in 2026 (99), and 99 so far in 2026.
Redhat Build of Keycloak vulnerabilities by year
2023
2024
2025
2026
Most exploited Redhat Build of Keycloak vulnerabilities
- CVE-2026-15572 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation
- CVE-2026-3047 Keycloak SAML Broken has Authentication Bypass by Primary Weakness
- CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher
- CVE-2026-16102 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers
- CVE-2026-1609 Org.keycloak/keycloak-quarkus-server: keycloak: unauthorized access via jwt authorization grant with disabled users
- CVE-2026-11800 Org.keycloak:keycloak-services: keycloak: authentication bypass via jwt algorithm confusion
- CVE-2026-9800 Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison
- CVE-2026-7504 Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak
- CVE-2026-4636 Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources.
- CVE-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider
- CVE-2026-3009 Keycloak allows authentication using an Identity Provider (IdP) even after it has been disabled by an administrator
- CVE-2024-1132 Keycloak: path transversal in redirection validation
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.