CVE record · CVE-2026-93998
Published by the CVE Program (CNA: redhat) at 5 Nov 2026, 17:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat AMQ Broker 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat Build of Keycloak Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: keycloak/rhbk-openshift-rhel9 https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: keycloak/rhbk-rhel9-operator https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: rhbk/keycloak-rhel9 https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: rhbk/keycloak-rhel9-operator https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Fuse 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk17-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk8-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 Package name: keycloak-core https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack Package name: keycloak-core https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat Satellite 6 Package name: candlepin https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat Single Sign-On 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.4 | High | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | CNA (redhat) |
