# Red Hat build of Keycloak 26.4.16.

Every CVE that names Red Hat build of Keycloak 26.4.16 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Keycloak-services: keycloak-services: broker-originated username collision causes account lockout](https://agentprime.io/advisories/CVE-2026-19607.md)
  `CVE-2026-19607` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accounts](https://agentprime.io/advisories/CVE-2026-17526.md)
  `CVE-2026-17526` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.2 High · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale caching](https://agentprime.io/advisories/CVE-2026-79651.md)
  `CVE-2026-79651` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service
- [Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segments](https://agentprime.io/advisories/CVE-2026-74909.md)
  `CVE-2026-74909` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib state](https://agentprime.io/advisories/CVE-2026-18212.md)
  `CVE-2026-18212` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service
- [Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters](https://agentprime.io/advisories/CVE-2026-19729.md)
  `CVE-2026-19729` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 4.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-build-of-keycloak-26-4-16>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-build-of-keycloak-26-4-16/>. Everything for agents: <https://agentprime.io/llms.txt>.