# Red Hat Build of Keycloak. Every CVE that names Red Hat Build of Keycloak among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line](https://agentprime.io/advisories/CVE-2026-93566.md) `CVE-2026-93566` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte](https://agentprime.io/advisories/CVE-2026-93565.md) `CVE-2026-93565` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)](https://agentprime.io/advisories/CVE-2026-93564.md) `CVE-2026-93564` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service](https://agentprime.io/advisories/CVE-2026-93558.md) `CVE-2026-93558` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size](https://agentprime.io/advisories/CVE-2026-93492.md) `CVE-2026-93492` · CVE record: Red Hat Red Hat Build of Debezium 3.6 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-1035 - [Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue](https://agentprime.io/advisories/CVE-2026-93491.md) `CVE-2026-93491` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams](https://agentprime.io/advisories/CVE-2026-93488.md) `CVE-2026-93488` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service - [Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security](https://agentprime.io/advisories/CVE-2026-87743.md) `CVE-2026-87743` · CVE record: Red Hat Red Hat build of Quarkus 3.27.5.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-551 - [Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config](https://agentprime.io/advisories/CVE-2026-89058.md) `CVE-2026-89058` · CVE record: Red Hat and 4 more · CVSS 7.4 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-346, CWE-942 - [Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)](https://agentprime.io/advisories/CVE-2026-89059.md) `CVE-2026-89059` · CVE record: Red Hat and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-409 - [Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch](https://agentprime.io/advisories/CVE-2026-90997.md) `CVE-2026-90997` · CVE record: Keycloak Keycloak and 1 more · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linking](https://agentprime.io/advisories/CVE-2026-92358.md) `CVE-2026-92358` · CVE record: Red Hat Red Hat Build of Keycloak and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: confidential client secret disclosed to view-clients role via client registration get](https://agentprime.io/advisories/CVE-2026-89298.md) `CVE-2026-89298` · CVE record: Red Hat Red Hat Build of Keycloak and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Information disclosure - [Keycloak-services: keycloak-services: device authorization grant issues tokens to brute-force-locked accounts](https://agentprime.io/advisories/CVE-2026-88770.md) `CVE-2026-88770` · CVE record: Red Hat Red Hat Build of Keycloak and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: cross-session email verification proof not bound to upstream identity for social providers](https://agentprime.io/advisories/CVE-2026-82968.md) `CVE-2026-82968` · CVE record: Red Hat Red Hat Build of Keycloak and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Broken access control - [Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding](https://agentprime.io/advisories/CVE-2026-19611.md) `CVE-2026-19611` · CVE record: Red Hat Red Hat Build of Apache Camel 3.33.3.SP2 and 4 more · CVSS 7.4 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-173 - [Keycloak-services: keycloak-services: name-only group claims let same-name groups satisfy path-specific group policies](https://agentprime.io/advisories/CVE-2026-19608.md) `CVE-2026-19608` · CVE record: Red Hat Red Hat Build of Keycloak and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: saml onetimeuse assertion replay in idp-initiated broker flow](https://agentprime.io/advisories/CVE-2026-18967.md) `CVE-2026-18967` · CVE record: Red Hat Red Hat Build of Keycloak and 2 more · CVSS 6.4 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Authentication bypass - [Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens](https://agentprime.io/advisories/CVE-2026-18569.md) `CVE-2026-18569` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 3.7 Low · Not analysed yet · Published 4 Aug 2026 · Tags: Weak cryptography or TLS - [Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass](https://agentprime.io/advisories/CVE-2026-18206.md) `CVE-2026-18206` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-20 - [Keycloak-services: keycloak-services: group policy extendchildren matches sibling group path prefixes](https://agentprime.io/advisories/CVE-2026-18203.md) `CVE-2026-18203` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains](https://agentprime.io/advisories/CVE-2026-18211.md) `CVE-2026-18211` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 4.2 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-20 - [Keycloak-services: keycloak-services: inactive out-of-audience token introspection leaks signed jwt claim](https://agentprime.io/advisories/CVE-2026-18208.md) `CVE-2026-18208` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: saml http-redirect binding response preserves query string leading to parameter pollution](https://agentprime.io/advisories/CVE-2026-18217.md) `CVE-2026-18217` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 3.4 Low · Not analysed yet · Published 31 Jul 2026 · Tags: CWE-20 - [Keycloak-services: keycloak-services: client policy source-group condition bypass via duplicate group name matching](https://agentprime.io/advisories/CVE-2026-18207.md) `CVE-2026-18207` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: vault-resolved rotated client secrets leaked via admin rest api](https://agentprime.io/advisories/CVE-2026-17048.md) `CVE-2026-17048` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Information disclosure - [Keycloak-services: keycloak-services: incomplete fix for ciba brute-force lockout bypass at token redemption](https://agentprime.io/advisories/CVE-2026-16103.md) `CVE-2026-16103` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 4.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-305, CWE-841 - [Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url change](https://agentprime.io/advisories/CVE-2026-15943.md) `CVE-2026-15943` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-1288 - [Keycloak-services: keycloak-services: oidc email_verified claim incorrectly applied to userinfo email](https://agentprime.io/advisories/CVE-2026-14781.md) `CVE-2026-14781` · CVE record: Red Hat Red Hat Build of Keycloak and 3 more · CVSS 4.8 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: CWE-1288 - [Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource](https://agentprime.io/advisories/CVE-2026-14614.md) `CVE-2026-14614` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Broken access control - [Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission](https://agentprime.io/advisories/CVE-2026-14613.md) `CVE-2026-14613` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Broken access control, CWE-1220 - [Keycloak-broker: keycloak: privilege escalation to realm administrator via improper authorization in identity provider mapper](https://agentprime.io/advisories/CVE-2026-12388.md) `CVE-2026-12388` · CVE record: Red Hat Red Hat Build of Keycloak · CVSS 6.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Privilege escalation - [Keycloak-services: blind server-side request forgery (ssrf) via http redirect handling in keycloak](https://agentprime.io/advisories/CVE-2026-4366.md) `CVE-2026-4366` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Server-side request forgery (SSRF) - [Keycloak-core: keycloak environment information](https://agentprime.io/advisories/CVE-2025-5416.md) `CVE-2025-5416` · CVE record: Red Hat Red Hat Build of Keycloak · CVSS 2.7 Low · Not analysed yet · Published 20 Jun 2025 · Tags: Information disclosure - [Wildfly: wildfly vulnerable to cross-site scripting (xss)](https://agentprime.io/advisories/CVE-2024-10234.md) `CVE-2024-10234` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7 and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 22 Oct 2024 · Tags: Cross-site scripting (XSS) Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .