Red Hat Security Advisory

RHSA-2026:2365

Red Hat build of Keycloak 26.4.9 Security Update

Released 2026-02-09 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-01183 CVE-2026-1486 · GHSA-37gf-gmxv-74wv

MEDIUM 41

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00492 Published 2026-02-09 Fixed in 26.4.9-1, 26.4-11 +3 CWE-358

TI-2026-01219 CVE-2026-1529 · GHSA-hcvw-475w-8g7p

LOW 36

A flaw was found in Keycloak.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00494 Published 2026-02-09 Fixed in 26.2.13-1, 26.2-15 +6 CWE-347

TI-2025-13301 CVE-2025-14559 · GHSA-wv3h-x6c4-r867

LOW 29

A flaw was found in the keycloak-services component of Keycloak.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00482 Published 2026-01-21 Fixed in 26.4.9-1, 26.4-11 +3 CWE-840

TI-2025-13491 CVE-2025-14778 · GHSA-fm6w-rrp3-2x4w

LOW 24

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00318 Published 2026-02-09 Fixed in 26.2.13-1, 26.2-15 +6 CWE-266

TI-2026-00651 CVE-2026-0871 · GHSA-v4jw-m6rm-399h

LOW 22

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00349 Published 2026-02-27 Partial fix · 26.4.9-1, 26.4-11 +2 CWE-266

TI-2026-00740 CVE-2026-0976 · GHSA-v897-pv23-r8cw

LOW 18

A flaw was found in Keycloak.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00489 Published 2026-01-15 Partial fix CWE-20

TI-2025-12685 CVE-2025-13881 · GHSA-g78x-7vwx-9f58

LOW 14

A flaw was found in Keycloak Admin API.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00408 Published 2026-02-02 Fixed in 26.4.9-1, 26.4-11 +3 CWE-266