Red Hat Single Sign On (Redhat) - vulnerabilities (CVEs)

263 CVEs, 13 in the last 30 days, 9 known versions, newest CVE from 2026-10-21. Vendor: Redhat.

CVEs of Red Hat Single Sign On

CVE-2026-114438 - CVSS 4.2 (medium), 2026-10-21: A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the…
CVE-2026-114370 - CVSS 3.7 (low), 2026-10-21: A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system.…
CVE-2026-84823 - CVSS 7.1 (high), 2026-10-15: A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal…
CVE-2026-85634 - CVSS 8.8 (high), 2026-10-15: A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage…
CVE-2026-109082 - CVSS 6.8 (medium), 2026-10-12: A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component…
CVE-2026-107889 - CVSS 5.5 (medium), 2026-10-09: A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be…
CVE-2026-107623 - CVSS 4.3 (medium), 2026-10-08: A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout…
CVE-2026-107604 - CVSS 4.9 (medium), 2026-10-08: A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only…
CVE-2026-107121 - CVSS 6.5 (medium), 2026-10-07: A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, Keycloak fails to strictly…
CVE-2026-105305 - CVSS 5.4 (medium), 2026-10-06: A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited…
CVE-2026-105306 - CVSS 6.5 (medium), 2026-10-05: A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration…
CVE-2026-105302 - CVSS 5.7 (medium), 2026-10-05: A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not…
CVE-2026-103884 - CVSS 6.5 (medium), 2026-10-01: A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly…
CVE-2026-101333 - CVSS 3.7 (low), 2026-09-28: A flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue occurs when…
CVE-2026-96448 - CVSS 6.6 (medium), 2026-09-25: A flaw was found in the Fine-Grained Admin Permissions (FGAP v2) feature of Keycloak, an identity and access management solution. The issue occurs when the…
CVE-2026-97846 - CVSS 6.8 (medium), 2026-09-25: Keycloak provides a feature called mTLS holder-of-key binding which ensures that a token can only be used by the client that originally requested it by…
CVE-2026-97311 - CVSS 4.3 (medium), 2026-09-24: A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a…
CVE-2026-97177 - CVSS 6.6 (medium), 2026-09-24: A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for…
CVE-2026-97176 - CVSS 4.2 (medium), 2026-09-24: A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client…
CVE-2026-96445 - CVSS 6.8 (medium), 2026-09-23: A flaw was found in the Conditional OTP authenticator of Keycloak, an identity and access management solution. The issue occurs when the system evaluates…
CVE-2026-96446 - CVSS 4.2 (medium), 2026-09-23: A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used,…
CVE-2026-95503 - CVSS 6.8 (medium), 2026-09-22: A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password…
CVE-2026-94218 - CVSS 3.1 (low), 2026-09-21: A flaw was found in the authentication session management of Keycloak, an identity and access management solution. The issue occurs when an administrator…
CVE-2026-94217 - CVSS 3.5 (low), 2026-09-21: A flaw was found in the User-Managed Access (UMA) implementation of Keycloak. The issue occurs in the authorization token endpoint when processing permission…
CVE-2026-94215 - CVSS 5.5 (medium), 2026-09-21: A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs because the API uses a…
CVE-2026-94213 - CVSS 4.9 (medium), 2026-09-21: A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy…
CVE-2026-94001 - CVSS 6.5 (medium), 2026-09-19: A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials…
CVE-2026-94000 - CVSS 6.6 (medium), 2026-09-19: A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints…
CVE-2026-93999 - CVSS 4.2 (medium), 2026-09-19: A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs during the token…
CVE-2026-93562 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request…
CVE-2026-93574 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1…
CVE-2026-93579 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage…
CVE-2026-93573 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in Netty's HTTP/1.1 decoder. This vulnerability allows a remote attacker to bypass `Transfer-Encoding` header validation by splitting the…
CVE-2026-93568 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's…
CVE-2026-93576 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty netty-codec-smtp. The component does not properly validate Carriage Return (CR) and Line Feed (LF) characters in the SMTP…
CVE-2026-85511 - CVSS 4.2 (medium), 2026-09-18: A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow…
CVE-2026-93569 - CVSS 8.2 (high), 2026-09-18: A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in Netty's HTTP/1 to HTTP/2 conversion process. When an HTTP/1…
CVE-2026-93567 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the…
CVE-2026-10832 - CVSS 5.9 (medium), 2026-09-18: A flaw was found in the DERDecoder class within wildfly-elytron-asn1. A remote attacker can exploit this resource exhaustion vulnerability by sending a…
CVE-2026-93566 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in Netty. A remote attacker could exploit this by sending a specially crafted HTTP request that includes control characters within the…
CVE-2026-93565 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time…
CVE-2026-93564 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty. A reference-count leak in the HAProxy PROXY-v2 message decoder allows a remote, unauthenticated attacker to send specially crafted…
CVE-2026-93558 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's WebSocketServerExtensionHandler. A remote, unauthenticated attacker can exploit this vulnerability by using HTTP/1.1 pipelining to…
CVE-2026-93560 - CVSS 7.5 (high), 2026-09-18: A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum…
CVE-2026-93492 - CVSS 5.3 (medium), 2026-09-18: A flaw was found in Netty's HTTP/2 HpackEncoder. A remote attacker can exploit this by sending HTTP/2 SETTINGS frames with a very large MAX_HEADER_TABLE_SIZE.…
CVE-2026-93491 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single…
CVE-2026-93488 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated streams because localConcurrentStreams defaults to…
CVE-2026-93563 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's `SmtpResponseDecoder` component. A remote attacker, acting as a malicious or man-in-the-middle (MITM) SMTP server, could exploit…
CVE-2026-93572 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability by sending specially crafted nested Redis…
CVE-2026-93575 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's MqttDecoder. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted MQTT CONNECT packet.…
CVE-2026-93561 - CVSS 6.5 (medium), 2026-09-18: A flaw was found in io.netty/netty-codec-memcache. The Memcache binary protocol codec incorrectly reads `keyLength` and `extrasLength` as signed Java types…
CVE-2026-93494 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Netty's StompSubframeDecoder component. A remote attacker can exploit this vulnerability by sending a specially crafted STOMP frame body…
CVE-2026-89058 - CVSS 7.4 (high), 2026-09-18: A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the…
CVE-2026-89059 - CVSS 7.5 (high), 2026-09-18: A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image…
CVE-2026-19607 - CVSS 5.3 (medium), 2026-09-16: A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when…
CVE-2026-17526 - CVSS 7.2 (high), 2026-09-16: Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a…
CVE-2026-79651 - CVSS 7.5 (high), 2026-09-16: A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and…
CVE-2026-74909 - CVSS 8.1 (high), 2026-09-16: Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the…
CVE-2026-18212 - CVSS 7.5 (high), 2026-09-16: A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the…
CVE-2026-92358 - CVSS 6.4 (medium), 2026-09-16: A flaw was found in the first broker login flow of Keycloak. When a user confirms an account-linking request from a different browser, a temporary proof is…
CVE-2026-89298 - CVSS 4.9 (medium), 2026-09-11: A flaw was found in the Dynamic Client Registration service of Keycloak, an open-source identity and access management solution. The issue occurs when a user…
CVE-2026-88770 - CVSS 6.5 (medium), 2026-09-10: A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption…
CVE-2026-19729 - CVSS 4.9 (medium), 2026-09-09: A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs…
CVE-2026-82968 - CVSS 6.4 (medium), 2026-09-02: A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their…
CVE-2026-81624 - CVSS 7.5 (high), 2026-08-31: Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically,…
CVE-2026-5680 - CVSS 7.5 (high), 2026-08-27: A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate…
CVE-2026-79652 - CVSS 5.9 (medium), 2026-08-25: A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component…
CVE-2026-19611 - CVSS 7.4 (high), 2026-08-20: A flaw was found in WildFly Elytron. Password hashing and verification normalize input with Unicode NFKC, which can collapse fullwidth characters to ASCII…
CVE-2026-76166 - CVSS 4.3 (medium), 2026-08-19: A flaw was found in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module). A single crafted UDP multicast datagram with a valid HTTP status…
CVE-2026-15571 - CVSS 7.3 (high), 2026-08-18: A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The…
CVE-2026-18963 - CVSS 9.1 (critical), 2026-08-18: A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat…
CVE-2026-19608 - CVSS 5.3 (medium), 2026-08-18: A flaw was found in the group policy provider of Keycloak authorization services, which is used to manage fine-grained access control to resources. The issue…
CVE-2026-19879 - CVSS 5.3 (medium), 2026-08-14: A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `writeString()` method performs a silent narrowing cast from…
CVE-2026-14180 - CVSS 5.3 (medium), 2026-08-11: A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The…
CVE-2026-15567 - CVSS 7.5 (high), 2026-08-11: A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled…
CVE-2026-15565 - CVSS 7.5 (high), 2026-08-11: A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has…
CVE-2026-15563 - CVSS 7.4 (high), 2026-08-11: A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups…
CVE-2026-24330 - CVSS 6.5 (medium), 2026-08-11: A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted…
CVE-2026-24329 - CVSS 4.9 (medium), 2026-08-11: A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload into the Inet Address field through the…
CVE-2026-18967 - CVSS 8.1 (high), 2026-08-06: A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the…
CVE-2026-16442 - CVSS 9.8 (critical), 2026-08-05: A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the…
CVE-2026-16100 - CVSS 6.5 (medium), 2026-08-05: A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account…
CVE-2026-16071 - CVSS 5.4 (medium), 2026-08-05: A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when a…
CVE-2026-16102 - CVSS 8.1 (high), 2026-08-05: A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR policy fails to…
CVE-2026-15573 - CVSS 8.1 (high), 2026-08-05: A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not…
CVE-2026-16443 - CVSS 9.1 (critical), 2026-08-05: A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat…
CVE-2026-18569 - CVSS 3.7 (low), 2026-08-04: A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles…
CVE-2026-17614 - CVSS 4.4 (medium), 2026-08-04: A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and getConfigurationFile() methods in…
CVE-2026-18573 - CVSS 6.5 (medium), 2026-08-02: A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a…
CVE-2026-18572 - CVSS 6.5 (medium), 2026-08-02: Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access…
CVE-2026-18571 - CVSS 7.2 (high), 2026-08-02: A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator…
CVE-2026-18570 - CVSS 5.4 (medium), 2026-08-02: A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing…
CVE-2026-18209 - CVSS 4.7 (medium), 2026-07-31: A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the…
CVE-2026-18206 - CVSS 3.7 (low), 2026-07-31: A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm…
CVE-2026-18203 - CVSS 6.5 (medium), 2026-07-31: A flaw was found in the group policy evaluation logic of Keycloak, an identity and access management solution. When a group policy is set to extend…
CVE-2026-18214 - CVSS 8.1 (high), 2026-07-31: Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where…
CVE-2026-18211 - CVSS 5.4 (medium), 2026-07-31: A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security…
CVE-2026-18208 - CVSS 6.5 (medium), 2026-07-31: A flaw was found in the OIDC token introspection endpoint of the keycloak-services component. Keycloak is an open-source identity and access management…
CVE-2026-16105 - CVSS 4.9 (medium), 2026-07-31: A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not…
CVE-2026-18215 - CVSS 8.1 (high), 2026-07-31: Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where…