Red Hat Red Hat Single Sign-On 7 vulnerabilities

CVEs per yearBy the year they were published

1. 202314
2. 202429
3. 202510
4. 2026171

Newest CVEs

• CVE-2026-120984

  Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import

  Red Hat · Red Hat Build of Keycloak

  Critical9.1
• CVE-2026-97848

  Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.5
• CVE-2026-97367

  Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.4
• CVE-2026-96547

  Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles

  Red Hat · Red Hat build of Keycloak 26.4

  Medium6.5
• CVE-2026-96460

  Keycloak-services: keycloak-services: indefinite access token renewal via standard token exchange v2

  Red Hat · Red Hat build of Keycloak 26.6

  Medium5.4
• CVE-2026-92856

  Keycloak-services: keycloak-services: saml broker ignores proxyrestriction delegation constraints

  Red Hat · Red Hat build of Keycloak 26.6

  Medium4.9
• CVE-2026-19688

  Keycloak-services: keycloak-services: admin api missing audience check

  Red Hat · Red Hat build of Keycloak 26.6

  Medium6.8
• CVE-2026-96447

  Keycloak-services: keycloak-services: stateless token preferred_username fallback enables identity rebinding

  Red Hat · Red Hat build of Keycloak 26.6

  Medium4.2
• CVE-2026-109081

  Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpoint

  Red Hat · Red Hat build of Keycloak 26.6

  Medium6.8
• CVE-2026-107124

  Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeover

  Red Hat · Red Hat build of Keycloak 26.6

  Medium6.4