Red Hat Security Advisory

RHSA-2026:96039

Red Hat build of Keycloak 26.6.9 Images Security Update

Released 2026-11-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Keycloak 26.6 rhbk/keycloak-operator-bundle, rhbk/keycloak-rhel9, rhbk/keycloak-rhel9-operator

TI-2026-85425 CVE-2026-117691 · GHSA-c85j-3hq2-q6wj

MEDIUM 47

A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00264 Published 2026-11-05 Fixed in 26.6-25, 26.6.9-1 +1 CWE-347