Red Hat Red Hat build of Keycloak 26.4
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
EPSS ≥ 10%
0
unpatched
by severity
2critical5high1medium2low
updated 2026-10-27
01
vulnerabilities (73)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-9086US | — | Exploit |
| CVE-2026-1529US | — | Exploit |
| CVE-2026-9794US | — | Exploit |
| CVE-2026-4282US | — | Exploit |
| CVE-2026-7307US | — | — |
| CVE-2026-7507US | — | — |
| CVE-2026-9083US | — | — |
| CVE-2026-15572US | — | — |
| CVE-2026-9800US | — | — |
| CVE-2026-2575US | — | — |
| CVE-2026-4634US | — | — |
| CVE-2026-7504US | — | — |
| CVE-2026-1486US | — | — |
| CVE-2026-3047US | — | — |
| CVE-2026-9099US | — | — |
| CVE-2026-4629US | — | — |
| CVE-2025-14559US | —OT elevated | — |
| CVE-2026-3121US | high7.2 | — |
| CVE-2026-9801US | — | — |
| CVE-2026-9705US | — | — |
| CVE-2026-16102US | — | — |
| CVE-2026-15573US | — | — |
| CVE-2026-2603US | —OT elevated | — |
| CVE-2026-37982US | —OT elevated | — |
| CVE-2026-3872US | — | — |
| CVE-2026-37978US | — | — |
| CVE-2026-4636US | — | — |
| CVE-2026-9803US | — | — |
| CVE-2026-7571US | — | — |
| CVE-2026-1190US | — | — |
| CVE-2025-13881US | — | — |
| CVE-2026-1180US | — | — |
| CVE-2026-0707US | — | — |
| CVE-2026-8830US | — | — |
| CVE-2026-14209US | — | — |
| CVE-2026-14615US | low2.7 | — |
| CVE-2026-9798US | — | — |
| CVE-2026-2092US | — | — |
| CVE-2026-2733US | — | — |
| CVE-2026-37981US | — | — |
| CVE-2026-37979US | — | — |
| CVE-2026-9795US | — | — |
| CVE-2026-4874US | low3.1 | — |
| CVE-2025-14083US | — | — |
| CVE-2025-14082US | — | — |
| CVE-2026-0871US | — | — |
| CVE-2026-9088US | — | — |
| CVE-2026-3009US | high8.1OT elevated | — |
| CVE-2025-14777US | — | — |
| CVE-2026-3911US | — | — |
showing 50 of 73
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-639Authorization Bypass Through User-Controlled Key8 CVEs
- CWE-284Improper Access Control7 CVEs
- CWE-266Incorrect Privilege Assignment6 CVEs
- CWE-347Improper Verification of Cryptographic Signature4 CVEs
- CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization4 CVEs
- CWE-1220Insufficient Granularity of Access Control3 CVEs
- CWE-613Insufficient Session Expiration3 CVEs
- CWE-863Incorrect Authorization3 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)73 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan