agentprime: red-hat-build-of-keycloak-26-4-14Every new CVE for red-hat-build-of-keycloak-26-4-14.https://agentprime.io/CVE-2026-15572: Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalationhttps://agentprime.io/advisories/CVE-2026-15572/https://agentprime.io/advisories/CVE-2026-15572/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:09:23 GMTCVECVE-2026-16442: Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restrictionhttps://agentprime.io/advisories/CVE-2026-16442/https://agentprime.io/advisories/CVE-2026-16442/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:00:39 GMTCVECVE-2026-16071: Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundaryhttps://agentprime.io/advisories/CVE-2026-16071/https://agentprime.io/advisories/CVE-2026-16071/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:54 GMTCVECVE-2026-16102: Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappershttps://agentprime.io/advisories/CVE-2026-16102/https://agentprime.io/advisories/CVE-2026-16102/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:50 GMTCVECVE-2026-15573: Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcherhttps://agentprime.io/advisories/CVE-2026-15573/https://agentprime.io/advisories/CVE-2026-15573/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:03 GMTCVECVE-2026-16443: Keycloak-services: keycloak-services: saml broker metadata import disables response signature validationhttps://agentprime.io/advisories/CVE-2026-16443/https://agentprime.io/advisories/CVE-2026-16443/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:44:09 GMTCVECVE-2026-14615: Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filterhttps://agentprime.io/advisories/CVE-2026-14615/https://agentprime.io/advisories/CVE-2026-14615/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:47:08 GMTCVECVE-2026-14614: Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresourcehttps://agentprime.io/advisories/CVE-2026-14614/https://agentprime.io/advisories/CVE-2026-14614/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:33:00 GMTCVECVE-2026-4629: Keycloak: keycloak: privilege escalation through hardcoded role mapper injectionhttps://agentprime.io/advisories/CVE-2026-4629/https://agentprime.io/advisories/CVE-2026-4629/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:00:28 GMTCVECVE-2026-14209: Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictionshttps://agentprime.io/advisories/CVE-2026-14209/https://agentprime.io/advisories/CVE-2026-14209/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 11:48:26 GMTCVE