Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Data Grid 8/keycloak-services
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
keycloak: keycloak: acceptable AAGUID policy bypass via packed self-attestation in WebAuthn registration
CVE-2026-6856
Red Hat Build of Keycloak/keycloak-services
Red Hat Data Grid 8/keycloak-services
Red Hat
Low
No fix reported
Not recorded
keycloak-services: keycloak-services: Group hierarchy search discloses hidden parent groups under FGAP v2
CVE-2026-15945
Red Hat Data Grid 8/keycloak-services
Red Hat JBoss Enterprise Application Platform Expansion Pack/keycloak-services
Red Hat
Medium
No fix reported
Not recorded
keycloak-services: keycloak-services: Required signed-JWT assertion policy can be bypassed with unsigned assertion headers
CVE-2026-16093
Red Hat Data Grid 8/keycloak-services
Red Hat JBoss Enterprise Application Platform Expansion Pack/keycloak-services
Red Hat
Medium
No fix reported
Not recorded
keycloak-services: keycloak-services: Authorization bypass via unnormalized URI matching in PathMatcher
CVE-2026-15573
Red Hat Data Grid 8/keycloak-services
Red Hat Single Sign-On 7/keycloak-services
Red Hat
High
No fix reported
Not recorded
keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state
CVE-2026-18212
Red Hat Data Grid 8/keycloak-services
Red Hat Single Sign-On 7/keycloak-services
Red Hat
High
No fix reported
Not recorded
