CVE record · CVE-2026-96453
Published by the CVE Program (CNA: redhat) at 5 Nov 2026, 17:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat AMQ Broker 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat Build of Keycloak Package name: keycloak-admin-cli https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: rhbk/keycloak-rhel9 https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Build of Keycloak Package name: rhbk/keycloak-rhel9-operator https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Fuse 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk17-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7 Package name: jboss-eap-7/eap74-els-openjdk8-openshift-rhel8 https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 Package name: keycloak-core https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack Package name: keycloak-core https://access.redhat.com/jbossnetwork/restricted/listSoftware.html | No versions given Other versions: unaffected |
| Red Hat | Red Hat Satellite 6 Package name: candlepin https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat Single Sign-On 7 Package name: keycloak-admin-cli https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
| Red Hat | Red Hat Single Sign-On 7 Package name: keycloak-core https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: unaffected |
| Red Hat | Red Hat Single Sign-On 7 Package name: rh-sso7-keycloak https://access.redhat.com/downloads/content/package-browser/ | No versions given Other versions: affected |
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 8.0 | High | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N | CNA (redhat) |
