Important: Red Hat Security Advisory: Red Hat build of Keycloak 26.6.4 Images Security Update

New images are available for Red Hat build of Keycloak 26.6.4 and Red Hat build of Keycloak 26.6.4 Operator, running on OpenShift Container Platform Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat...

CVE-2026-7500 vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-7500 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

fr.cnieg.keycloak:attribute-login-provider (>=1.3.0, <=1.3.1), io.teragroup.keycloak.extension:migration (>=19.0.3.1, <=19.0.3.2) +25 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (19.0.3)

org.keycloak:keycloak-services MAVEN version 19.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider =1.3.0, =19.0.3.1, =1.11, =1.11, =1.11, =1.11, =1.11,...

org.keycloak:keycloak-dependencies-server-min (4.0.0.beta2), org.keycloak:keycloak-model-jpa (4.0.0.beta2) +2 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (4.0.0.beta2)

org.keycloak:keycloak-services MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.beta2 - org.keycloak:keycloak-model-jpa...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +24 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (17.0.1)

org.keycloak:keycloak-services MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

org.keycloak:keycloak-account-freemarker (1.3.0.final), org.keycloak:keycloak-broker-oidc (1.3.0.final) +10 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (1.3.0.final)

org.keycloak:keycloak-services MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.3.0.final - org.keycloak:keycloak-broker-oidc...

org.keycloak:keycloak-account-freemarker (1.2.0.cr1), org.keycloak:keycloak-broker-oidc (1.2.0.cr1) +8 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (1.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 1.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.2.0.cr1 - org.keycloak:keycloak-broker-oidc 1.2.0.cr...

org.keycloak:keycloak-crypto-fips1402 (25.0.3), org.keycloak:keycloak-dependencies-server-all (25.0.3) +12 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (25.0.3)

org.keycloak:keycloak-services MAVEN version 25.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-crypto-fips1402 25.0.3 - org.keycloak:keycloak-dependencies-server-all 25.0....

fr.cnieg.keycloak:attribute-login-provider (1.4.4), io.phasetwo.keycloak:keycloak-events (>=0.27, <=0.28) +18 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (24.0.0)

org.keycloak:keycloak-services MAVEN version 24.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.4.4 - io.phasetwo.keycloak:keycloak-events =0.27,...

fr.cnieg.keycloak:attribute-login-provider (1.3.8), io.phasetwo.keycloak:keycloak-extensions (0.1) +24 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (22.0.3)

org.keycloak:keycloak-services MAVEN version 22.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.8 - io.phasetwo.keycloak:keycloak-extensions 0.1 -...

io.github.kilmajster:keycloak-username-password-attribute-authenticator (0.2.0), org.keycloak:authenticator-required-action-example (15.1.1) +17 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (15.1.1)

org.keycloak:keycloak-services MAVEN version 15.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.kilmajster:keycloak-username-password-attribute-authenticator 0.2.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.12, <=1.3.14), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.12, <=1.3.14) +29 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (15.0.2)

org.keycloak:keycloak-services MAVEN version 15.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.12, =1.3.12, =1.3.12, =1.3.12, =1.3.12,...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +23 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (13.0.1)

org.keycloak:keycloak-services MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=1.1.0-22.0.1, <=1.3.2-22.0.1), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=1.1.0-22.0.1, <=1.3.2-22.0.1) +29 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (22.0.1)

org.keycloak:keycloak-services MAVEN version 22.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =1.1.0-22.0.1, =1.1.0-22.0.1, =1.0.1, =1.0.2 -...

fr.cnieg.keycloak:attribute-login-provider (1.3.7), org.keycloak:keycloak-crypto-fips1402 (22.0.2) +13 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (22.0.2)

org.keycloak:keycloak-services MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.7 - org.keycloak:keycloak-crypto-fips1402 22.0.2 -...

de.arbeitsagentur.opdt:keycloak-cassandra-extension (>=3.0.1-25.0, <=4.0.1-25.0), de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0, <=4.0.1-25.0) +25 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (25.0.1)

org.keycloak:keycloak-services MAVEN version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-extension =3.0.1-25.0, =3.0.1-25.0, =4.0.1-25.0 -...

com.charlyghislain.keycloak:keycloak-importexport (>=11.0.1, <=11.0.2), fr.cnieg.keycloak:attribute-login-provider (>=1.1.0, <=1.2.4) +9 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (11.0.2)

org.keycloak:keycloak-services MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport =11.0.1, =1.1.0, =1.2.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.4), com.github.vzakharchenko:cisco-radius-plugin (1.3.4) +23 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (12.0.3)

org.keycloak:keycloak-services MAVEN version 12.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.4 -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.2.9, <=1.3.0), com.github.vzakharchenko:cisco-radius-plugin (>=1.2.9, <=1.3.0) +21 more potentially affected by CVE-2026-7500 via org.keycloak:keycloak-services (12.0.0)

org.keycloak:keycloak-services MAVEN version 12.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9, =1.2.9,...