CLEANSTART-2026-PI18525 flaw was found in the TokenManager component of the Keycloak identity management service

Security vulnerability affects the keycloak package. A flaw was found in the TokenManager component of the Keycloak identity management service...

CLEANSTART-2026-ZF70449 flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution

Security vulnerability affects the keycloak package. A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution...

CLEANSTART-2026-GB37349 flaw was found in the admin REST API of Keycloak, a solution for identity and access management

Security vulnerability affects the keycloak package. A flaw was found in the admin REST API of Keycloak, a solution for identity and access management...

CLEANSTART-2026-AH74122 Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication

Security vulnerability affects the keycloak package. Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication...

CLEANSTART-2026-ZE25949 flaw was found in the default-groups REST endpoint and realm representation of Keycloak

Security vulnerability affects the keycloak package. A flaw was found in the default-groups REST endpoint and realm representation of Keycloak...

CLEANSTART-2026-LI01273 flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows

Security vulnerability affects the keycloak package. A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect OIDC authentication flows...

CLEANSTART-2026-EU32419 It was identified that the LDAP client implementation in version 2

Security vulnerability affects the keycloak package. It was identified that the LDAP client implementation in version 2...

PT-2026-95825

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the OpenID Connect OIDC protocol implementation. During the token refresh process, the server restores requested audiences from stored client IDs but fails to verify if the...

PT-2026-95826

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Admin REST API of Keycloak. The issue resides in the group-membership endpoints, where the system does not verify if a group grants administrative privileges before...

PT-2026-95827

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the Admin REST API of Keycloak. The endpoint used for deleting user credentials fails to correctly verify fine-grained reset-password permissions. This allows a delegated...

CVE-2026-94001: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...

CVE-2026-94000: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...

CVE-2026-93999: Missing Authorization

A flaw was found in the OIDC protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs during the token refresh process when the server restores requested audiences from stored client IDs. Keycloak fails to verify if the target audience client i...

CVE-2026-4282-Scanner

CVE-2026-4282-Scanner Un escáner de vulnerabilidades no intrusivo, basado en versiones, para CVE-2026-4282 , que afecta a Keycloak y a Red Hat Build of Keycloak RHBK. ⚠️ Descargo de responsabilidad: Esta herramienta está pensada estrictamente para investigación de seguridad autorizada, pruebas de...

CLEANSTART-2026-DA27362 Security fix for ghsa-fghv-69vj-qj49 applied in: cloudwatch-exporter 0.16.0-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, keycloak 26.1.4-r1, keycloak 26.2.12-r0, kogito-apps 10.1.0-r0, kserve-modelmesh 0.12.0-r16, management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

ghsa-fghv-69vj-qj49 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LB17279 Security fix for ghsa-4cx2-fc23-5wg6 applied in: keycloak 26.1.4-r1, kserve-modelmesh 0.12.0-r16, logstash-fips 9.0.8-r3, orientdb 3.2.38-r0

ghsa-4cx2-fc23-5wg6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XW89737 Security fix for ghsa-hq9p-pm7w-8p54 applied in: keycloak 26.1.4-r1, keycloak 26.2.12-r0, kogito-apps 10.1.0-r0

ghsa-hq9p-pm7w-8p54 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LI24140 Security fix for ghsa-9342-92gg-6v29 applied in: keycloak 26.1.4-r1, keycloak 26.2.12-r0, sonarqube 25.12.0.117093-r3, sonarqube 26.4.0.121862-r2

ghsa-9342-92gg-6v29 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LY97922 Security fix for ghsa-45p5-v273-3qqr applied in: incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.1.4-r1, keycloak 26.2.12-r0, keycloak 26.5.0-r0, keycloak 26.5.0-r2, keycloak 26.5.7-r0, kogito-apps 10.1.0-r0

ghsa-45p5-v273-3qqr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HQ10523 Security fix for ghsa-h5fg-jpgr-rv9c applied in: incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.1.4-r1, keycloak 26.2.12-r0, keycloak 26.5.0-r0, keycloak 26.5.0-r2, keycloak 26.5.7-r0, kogito-apps 10.1.0-r0

ghsa-h5fg-jpgr-rv9c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...