# Red Hat build of Keycloak 26.4.17. Every CVE that names Red Hat build of Keycloak 26.4.17 among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Keycloak-services: keycloak-services: protocol mapper with jsontype=json bypasses token sanitization](https://agentprime.io/advisories/CVE-2026-97848.md) `CVE-2026-97848` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: CWE-20 - [Keycloak-services: keycloak-services: dcr azp and sid claim substitution allows account rest session takeover](https://agentprime.io/advisories/CVE-2026-97367.md) `CVE-2026-97367` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: dcr registration-time claim-path gap allows forging realm_access.roles](https://agentprime.io/advisories/CVE-2026-96547.md) `CVE-2026-96547` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Nov 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: client manager can substitute sessionless token principal via hardcoded-claim mappers to obtain realm administrator authority](https://agentprime.io/advisories/CVE-2026-97847.md) `CVE-2026-97847` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: unverified idp email auto-linking enables account takeover](https://agentprime.io/advisories/CVE-2026-97175.md) `CVE-2026-97175` · CVE record: Red Hat Red Hat build of Keycloak 26.4.17 and 2 more · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Authentication bypass - [Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates](https://agentprime.io/advisories/CVE-2026-96453.md) `CVE-2026-96453` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 8.0 High · Not analysed yet · Published 5 Nov 2026 · Tags: Weak cryptography or TLS - [Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer](https://agentprime.io/advisories/CVE-2026-93998.md) `CVE-2026-93998` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.4 High · Not analysed yet · Published 5 Nov 2026 · Tags: Weak cryptography or TLS - [Keycloak-services: keycloak-services: dcr protocol mapper config not validated, allowing iat holders to forge sub and aud claims in signed tokens](https://agentprime.io/advisories/CVE-2026-92857.md) `CVE-2026-92857` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-20 - [Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possession](https://agentprime.io/advisories/CVE-2026-92855.md) `CVE-2026-92855` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.4 High · Not analysed yet · Published 5 Nov 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsing](https://agentprime.io/advisories/CVE-2026-82965.md) `CVE-2026-82965` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service - [Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource access](https://agentprime.io/advisories/CVE-2026-114232.md) `CVE-2026-114232` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 8.1 High · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loop](https://agentprime.io/advisories/CVE-2026-110931.md) `CVE-2026-110931` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service - [Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loop](https://agentprime.io/advisories/CVE-2026-107602.md) `CVE-2026-107602` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Denial of service - [Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials path](https://agentprime.io/advisories/CVE-2026-103112.md) `CVE-2026-103112` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Race condition - [Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling](https://agentprime.io/advisories/CVE-2026-93562.md) `CVE-2026-93562` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing](https://agentprime.io/advisories/CVE-2026-93574.md) `CVE-2026-93574` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling - [Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)](https://agentprime.io/advisories/CVE-2026-93579.md) `CVE-2026-93579` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling](https://agentprime.io/advisories/CVE-2026-93573.md) `CVE-2026-93573` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling - [Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests](https://agentprime.io/advisories/CVE-2026-93568.md) `CVE-2026-93568` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-20 - [Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority](https://agentprime.io/advisories/CVE-2026-93569.md) `CVE-2026-93569` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: HTTP request smuggling - [Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority](https://agentprime.io/advisories/CVE-2026-93567.md) `CVE-2026-93567` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-20 - [Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line](https://agentprime.io/advisories/CVE-2026-93566.md) `CVE-2026-93566` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte](https://agentprime.io/advisories/CVE-2026-93565.md) `CVE-2026-93565` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)](https://agentprime.io/advisories/CVE-2026-93564.md) `CVE-2026-93564` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service](https://agentprime.io/advisories/CVE-2026-93558.md) `CVE-2026-93558` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size](https://agentprime.io/advisories/CVE-2026-93492.md) `CVE-2026-93492` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue](https://agentprime.io/advisories/CVE-2026-93491.md) `CVE-2026-93491` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams](https://agentprime.io/advisories/CVE-2026-93488.md) `CVE-2026-93488` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding](https://agentprime.io/advisories/CVE-2026-19611.md) `CVE-2026-19611` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-173 - [Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution](https://agentprime.io/advisories/CVE-2026-18217.md) `CVE-2026-18217` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 3.4 Low · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-20 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .