PT-2026-29730

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak where the SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This allows an attacker to delete arbitrary single-use...

PT-2026-29728

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak that allows an attacker controlling another path on the same web server to bypass the allowed path in redirect Uniform Resource Identifiers URIs using a wildcard. A...

CLEANSTART-2026-TA42758 Security fixes for ghsa-3p8m-j85q-pgmj, ghsa-45p5-v273-3qqr, ghsa-4cx2-fc23-5wg6, ghsa-9342-92gg-6v29, ghsa-fghv-69vj-qj49, ghsa-h5fg-jpgr-rv9c, ghsa-hq9p-pm7w-8p54, ghsa-j288-q9x7-2f5v applied in versions: 26.1.4-r1

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42286

Multiple security vulnerabilities affect the keycloak package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-65XW-VW82-R86X vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, crossplane-provider-aws-rds, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, grafana-alloy,...

CVE-2026-32287 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent, crossplane-provider-aws-rds, crossplane-provider-aws-kinesis, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, crossplane-provider-aws-cloudfront, crossplane-provider-azure-storage, grafana-alloy,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly, sonarqube, trino, opensearch, keycloak, infinispan, management-api-for-apache-cassandra-5.0, spark, thingsboard, apache-pulsar, celeborn, kserve-modelmesh, strimzi-kafka-operator, wavefront-proxy, druid, flyway, zipkin, akhq, neo4j...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly, sonarqube, trino, opensearch, keycloak, infinispan, management-api-for-apache-cassandra-5.0, spark, thingsboard, apache-pulsar, celeborn, kserve-modelmesh, strimzi-kafka-operator, wavefront-proxy, druid, flyway, zipkin, akhq, neo4j...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: wildfly, keycloak, druid, kayenta, hono, kafbat-ui-fips, knative-kafka-broker, spark, seata, kafka-bridge-fips, knative-kafka-broker-fips, flyway, neo4j, kserve-modelmesh, apache-hop, spark-fips, elasticsearch, thingsboard, management-api-for-apache-cassandra-5.0,...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: wildfly, keycloak, druid, kayenta, hono, kafbat-ui-fips, knative-kafka-broker, spark, seata, kafka-bridge-fips, knative-kafka-broker-fips, flyway, neo4j, kserve-modelmesh, apache-hop, spark-fips, elasticsearch, thingsboard, management-api-for-apache-cassandra-5.0,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly, sonarqube, apache-activemq-artemis, trino, opensearch, logstash, keycloak, infinispan, management-api-for-apache-cassandra-5.0, spark, thingsboard, apache-pulsar, celeborn, kserve-modelmesh, strimzi-kafka-operator, wavefront-proxy, druid,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: apicurio-registry, wildfly, sonarqube, apache-activemq-artemis, trino, opensearch, logstash, keycloak, infinispan, management-api-for-apache-cassandra-5.0, spark, thingsboard, apache-pulsar, celeborn, kserve-modelmesh, strimzi-kafka-operator, wavefront-proxy, druid,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, wildfly, keycloak, druid, kayenta, hono, kafbat-ui-fips, knative-kafka-broker, spark, seata, kafka-bridge-fips, logstash, knative-kafka-broker-fips, flyway, neo4j, kserve-modelmesh, spark-fips, elasticsearch, thingsboard,...

keycloak:PemUtilsProviderFuzzer: Security exception in org.bouncycastle.asn1.IndefiniteLengthInputStream.read

Detailed Report: https://oss-fuzz.com/testcase?key=5053916869099520 Project: keycloak Fuzzing Engine: libFuzzer Fuzz Target: PemUtilsProviderFuzzer Job Type: libfuzzerasankeycloak Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

Keycloak: manage-clients permission escalates to full realm admin access

A flaw was found in Keycloak. An administrator with manage-clients permission can exploit a misconfiguration where this permission is equivalent to manage-permissions. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within...

GHSA-Q35R-VVHV-VX5H Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure

A flaw was found in Keycloak. The User-Managed Access UMA 2.0 Protection API endpoint for permission tickets fails to enforce the umaprotection role check. This allows any authenticated user with a token issued for a resource server client, even without the umaprotection role, to enumerate all...

GHSA-7XF9-4JFC-WGM4 Keycloak: manage-clients permission escalates to full realm admin access

A flaw was found in Keycloak. An administrator with manage-clients permission can exploit a misconfiguration where this permission is equivalent to manage-permissions. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within...

EUVD-2026-16309

A flaw was found in Keycloak. The User-Managed Access UMA 2.0 Protection API endpoint for permission tickets fails to enforce the umaprotection role check. This allows any authenticated user with a token issued for a resource server client, even without the umaprotection role, to enumerate all...

Keycloak: Missing Role Enforcement on UMA 2.0 Permission Ticket Endpoint Leads to Information Disclosure

A flaw was found in Keycloak. The User-Managed Access UMA 2.0 Protection API endpoint for permission tickets fails to enforce the umaprotection role check. This allows any authenticated user with a token issued for a resource server client, even without the umaprotection role, to enumerate all...

EUVD-2026-16307

A flaw was found in Keycloak. An administrator with manage-clients permission can exploit a misconfiguration where this permission is equivalent to manage-permissions. This allows the administrator to escalate privileges and gain control over roles, users, or other administrative functions within...