# Red Hat build of Keycloak 26.6.8.

Every CVE that names Red Hat build of Keycloak 26.6.8 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers](https://agentprime.io/advisories/CVE-2026-82968.md)
  `CVE-2026-82968` · CVE record: Red Hat Red Hat build of Keycloak 26.6.8 and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Broken access control
- [Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding](https://agentprime.io/advisories/CVE-2026-19611.md)
  `CVE-2026-19611` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-173
- [Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies](https://agentprime.io/advisories/CVE-2026-19608.md)
  `CVE-2026-19608` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes](https://agentprime.io/advisories/CVE-2026-18203.md)
  `CVE-2026-18203` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim](https://agentprime.io/advisories/CVE-2026-18208.md)
  `CVE-2026-18208` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution](https://agentprime.io/advisories/CVE-2026-18217.md)
  `CVE-2026-18217` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 3.4 Low · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-20
- [Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching](https://agentprime.io/advisories/CVE-2026-18207.md)
  `CVE-2026-18207` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Broken access control
- [Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption](https://agentprime.io/advisories/CVE-2026-16103.md)
  `CVE-2026-16103` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-305, CWE-841
- [Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change](https://agentprime.io/advisories/CVE-2026-15943.md)
  `CVE-2026-15943` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-1288
- [Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper](https://agentprime.io/advisories/CVE-2026-12388.md)
  `CVE-2026-12388` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation

Newest: <https://agentprime.io/advisories/technology/red-hat-build-of-keycloak-26-6-8.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-build-of-keycloak-26-6-8&cursor=WyIyMDI2LTA5LTEwVDA3OjE4OjE4Ljg2MTAwMFoiLCJDVkUtMjAyNi04ODc3MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-build-of-keycloak-26-6-8/?cursor=WyIyMDI2LTA5LTEwVDA3OjE4OjE4Ljg2MTAwMFoiLCJDVkUtMjAyNi04ODc3MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.