agentprime: red-hat-build-of-keycloak-26-4Every new CVE for red-hat-build-of-keycloak-26-4.https://agentprime.io/CVE-2026-19607: Keycloak-services: keycloak-services: broker-originated username collision causes account lockouthttps://agentprime.io/advisories/CVE-2026-19607/https://agentprime.io/advisories/CVE-2026-19607/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 15:46:43 GMTCVECVE-2026-17526: Keycloak-services: keycloak-services: privilege escalation via impersonation role allows takeover of realm administrator accountshttps://agentprime.io/advisories/CVE-2026-17526/https://agentprime.io/advisories/CVE-2026-17526/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 15:46:13 GMTCVECVE-2026-79651: Keycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachinghttps://agentprime.io/advisories/CVE-2026-79651/https://agentprime.io/advisories/CVE-2026-79651/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:55:09 GMTCVECVE-2026-74909: Keycloak-services: keycloak-services: incomplete fix for cve-2026-15573 allows policy enforcer bypass via percent-encoded uri segmentshttps://agentprime.io/advisories/CVE-2026-74909/https://agentprime.io/advisories/CVE-2026-74909/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:54:47 GMTCVECVE-2026-18212: Keycloak-services: keycloak-services: saml redirect deflate helpers leak native zlib statehttps://agentprime.io/advisories/CVE-2026-18212/https://agentprime.io/advisories/CVE-2026-18212/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:54:15 GMTCVECVE-2026-19729: Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parametershttps://agentprime.io/advisories/CVE-2026-19729/https://agentprime.io/advisories/CVE-2026-19729/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 07:03:35 GMTCVECVE-2026-15572: Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalationhttps://agentprime.io/advisories/CVE-2026-15572/https://agentprime.io/advisories/CVE-2026-15572/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:09:23 GMTCVECVE-2026-16442: Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restrictionhttps://agentprime.io/advisories/CVE-2026-16442/https://agentprime.io/advisories/CVE-2026-16442/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 15:00:39 GMTCVECVE-2026-16071: Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundaryhttps://agentprime.io/advisories/CVE-2026-16071/https://agentprime.io/advisories/CVE-2026-16071/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:54 GMTCVECVE-2026-16102: Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappershttps://agentprime.io/advisories/CVE-2026-16102/https://agentprime.io/advisories/CVE-2026-16102/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:50 GMTCVECVE-2026-15573: Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcherhttps://agentprime.io/advisories/CVE-2026-15573/https://agentprime.io/advisories/CVE-2026-15573/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:50:03 GMTCVECVE-2026-16443: Keycloak-services: keycloak-services: saml broker metadata import disables response signature validationhttps://agentprime.io/advisories/CVE-2026-16443/https://agentprime.io/advisories/CVE-2026-16443/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 13:44:09 GMTCVECVE-2026-14615: Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filterhttps://agentprime.io/advisories/CVE-2026-14615/https://agentprime.io/advisories/CVE-2026-14615/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:47:08 GMTCVECVE-2026-14614: Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresourcehttps://agentprime.io/advisories/CVE-2026-14614/https://agentprime.io/advisories/CVE-2026-14614/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Jul 2026 15:33:00 GMTCVECVE-2026-4629: Keycloak: keycloak: privilege escalation through hardcoded role mapper injectionhttps://agentprime.io/advisories/CVE-2026-4629/https://agentprime.io/advisories/CVE-2026-4629/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:00:28 GMTCVECVE-2026-14209: Keycloak-admin-ui: keycloak-admin-ui:admin ui extension brute-force-user endpoint bypasses fgapv2 user view restrictionshttps://agentprime.io/advisories/CVE-2026-14209/https://agentprime.io/advisories/CVE-2026-14209/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 11:48:26 GMTCVECVE-2026-9099: Keycloak: group-admin escalation to realm-adminhttps://agentprime.io/advisories/CVE-2026-9099/https://agentprime.io/advisories/CVE-2026-9099/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:16:43 GMTCVECVE-2026-4366: Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloakhttps://agentprime.io/advisories/CVE-2026-4366/https://agentprime.io/advisories/CVE-2026-4366/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 04:02:59 GMTCVECVE-2025-14777: Keycloak: keycloak idor in realm client creating/deletinghttps://agentprime.io/advisories/CVE-2025-14777/https://agentprime.io/advisories/CVE-2025-14777/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 05:02:42 GMTCVE