Red Hat Build of Keycloak vulnerabilities and fixes
Exploited and high-severity Red Hat Build of Keycloak vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.8CVE-2026-97175Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeoverVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.1CVE-2026-97847Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authorityVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.4CVE-2026-92855Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possessionVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 8.1CVE-2026-92857Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokensVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-82965Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsingVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 8.1CVE-2026-114232Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource accessVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 8.1CVE-2026-112208Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first loginVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-110931Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loopVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-110932Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cacheVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-107602Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loopVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-107123Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsingVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 7.5CVE-2026-103112Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials pathVerify fixRed Hat Red Hat Build of Keycloak
1 min read - 9.1CVE-2026-117691Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter namesVerify fixRed Hat Red Hat Build of Keycloak
1 min read