Advisories · Technology
Red Hat build of Keycloak 26.6.6.
Every CVE that names Red Hat build of Keycloak 26.6.6 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client
- Red Hat build of Keycloak 26.6
- Red Hat build of Keycloak 26.6.6
- CWE-341
- CVSS 5.5 Medium
Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api
- Red Hat build of Keycloak 26.6
- Red Hat build of Keycloak 26.6.6
- Information disclosure
- CVSS 4.3 Medium
Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission
- Red Hat build of Keycloak 26.6
- Red Hat build of Keycloak 26.6.6
- Broken access control
- CWE-1220