Red Hat Security Advisory

RHSA-2026:96040

Red Hat build of Keycloak 26.6.9 Security Update

Released 2026-11-07 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-85425 CVE-2026-117691 · GHSA-c85j-3hq2-q6wj

MEDIUM 47

A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00264 Published 2026-11-05 Fixed in 26.6-25, 26.6.9-1 +1 CWE-347