Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Red Hat build of Keycloak 26.2 — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Red Hat build of Keycloak 26.2, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE IDTitleCVSSSeverityPaused
CVE-2026-4636 Keycloak: keycloak: uma policy bypass allows authenticated users to gain unauthorized access to victim-owned resources. CWE-551 8.1 High2026-04-02
CVE-2026-4282 Keycloak: keycloak: privilege escalation via forged authorization codes due to singleuseobjectprovider isolation flaw CWE-653 7.4 High2026-04-02
CVE-2026-4325 Keycloak: keycloak: replay of action tokens via improper handling of single-use entries CWE-653 5.3 Medium2026-04-02
CVE-2026-4634 Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters CWE-1050 7.5 High2026-04-02
CVE-2026-3872 Keycloak: keycloak: information disclosure due to redirect_uri validation bypass CWE-601 7.3 High2026-04-02
CVE-2026-2603 Keycloak: keycloak: unauthorized authentication via disabled saml identity provider CWE-306 8.1 High2026-03-18
CVE-2026-2092 Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions CWE-1287 7.7 High2026-03-18
CVE-2026-3047 Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login CWE-305 8.8 High2026-03-05
CVE-2025-14778 Keycloak: incorrect ownership checks in /uma-policy/ CWE-266 5.4 Medium2026-02-09
CVE-2026-1529 Org.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validation CWE-347 8.1 High2026-02-09

All 10 known CVE vulnerabilities affecting Red Hat build of Keycloak 26.2 with full Chinese analysis, references, and POCs where available.