CLEANSTART-2026-TO43731 Security fixes in keycloak 26.4.7-r7

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Keycloak 26.4.7-r7 fixes two vulnerabilities: CVE-2026-40984 and CVE-2026-50559.

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.	5 Aug 202607:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Micrometer vulnerability that could allow Denial of Service (Dos) attacks	26 Jun 202618:37	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by an authentication/authentization bypass vulnerability	23 Jun 202612:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer [CVE-2026-40983, CVE-2026-40984]	27 Jul 202620:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in Micrometer (CVE-2026-40984)	18 Aug 202609:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jul 202617:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm
ATTACKERKB	CVE-2026-50559	19 Jun 202620:26	–	attackerkb
Atlassian	DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Bamboo Data Center	7 Aug 202616:30	–	atlassian

Source	Link
github	www.github.com/keycloak/keycloak

01 Aug 2026 05:30Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.00763

SSVC

Keycloak version 26.4.7-r7 security fixes two vulnerabilities