org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.1), org.keycloak:keycloak-account-freemarker (1.0-final) +4 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0-final)

org.keycloak:keycloak-services MAVEN version 1.0-final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.1 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

org.keycloak:keycloak-forms (1.0-alpha-1-12062013), org.keycloak:keycloak-server (1.0-alpha-1-12062013) potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0-alpha-1-12062013)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-1-12062013 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-forms 1.0-alpha-1-12062013 - org.keycloak:keycloak-server...

org.keycloak:keycloak-authz-policy-drools (3.3.0.cr2), org.keycloak:keycloak-dependencies-server-all (3.3.0.cr2) +6 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (3.3.0.cr2)

org.keycloak:keycloak-services MAVEN version 3.3.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.3.0.cr2 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.0.2, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (1.0.4.final) +4 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0.4.final)

org.keycloak:keycloak-services MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.0.2, =1.1.0-alpha.1 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.0.final), org.keycloak:keycloak-account-freemarker (1.0-rc-1) +4 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-services (1.0-rc-1)

org.keycloak:keycloak-services MAVEN version 1.0-rc-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.0.final -...

com.github.vzakharchenko:rad-sec-plugin (1.6.1), com.github.vzakharchenko:radius-disconnect-plugin (1.6.1) +119 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-server-spi-private (>=26.3.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.3.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =5.4.4-26.4, =5.4.4-26.4, =2.4.5, =2.0.3-26.4, =2.3.0 and more Source cves: CVE-2026-9088 Source advisory: MEND:CVE-2026-9088https://vulners.com/mend/MEND:CVE-2026...

ch.nerdin.keycloak.extensions:avatar-extension (0.0.1), com.caputchin:caputchin-keycloak (0.2.0) +170 more potentially affected by CVE-2026-9088 via org.keycloak:keycloak-server-spi-private (>=26.0.0, <=26.6.2)

org.keycloak:keycloak-server-spi-private MAVEN version =26.0.0, =1.0.0, =1.2.0, =1.1.0, =1.0.1, =1.1.0, =0.0.0, =0.0.0, =13.10.0.release and more Source cves: CVE-2026-9088 Source advisory: SNYK:JAVA-ORGKEYCLOAK-17220132...

org.keycloak:keycloak-dependencies-server-all (1.0.5.final), org.keycloak:keycloak-server (1.0.5.final) potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (1.0.5.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.5.final -...

com.github.vzakharchenko:chillispot-radius-plugin (>=1.3.8, <=1.3.9), com.github.vzakharchenko:cisco-radius-plugin (>=1.3.8, <=1.3.9) +17 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (14.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 14.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin =1.3.8, =1.3.8, =1.3.8, =1.3.8,...

org.keycloak:keycloak-authz-policy-drools (3.4.1.final), org.keycloak:keycloak-dependencies-server-all (3.4.1.final) +6 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (3.4.1.final)

org.keycloak:keycloak-services MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.final -...

org.keycloak:keycloak-authz-policy-drools (3.4.0.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.0.cr1) +6 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (3.4.0.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.0.cr1 -...

org.keycloak:keycloak-dependencies-server-all (6.0.0), org.keycloak:keycloak-server-feature-pack (6.0.0) +2 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (6.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 6.0.0 -...

org.keycloak:keycloak-account-freemarker (1.0-rc-2), org.keycloak:keycloak-dependencies-server-all (1.0-rc-2) +3 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (1.0-rc-2)

org.keycloak:keycloak-services MAVEN version 1.0-rc-2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-rc-2 - org.keycloak:keycloak-dependencies-server-al...

org.keycloak:keycloak-dependencies-server-all (9.0.0), org.keycloak:keycloak-server-feature-pack (9.0.0) +2 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (9.0.0)

org.keycloak:keycloak-ldap-federation MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 9.0.0 -...

org.keycloak:keycloak-dependencies-server-all (10.0.0), org.keycloak:keycloak-dependencies-server-min (10.0.0) +5 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (10.0.0)

org.keycloak:keycloak-services MAVEN version 10.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 10.0.0 - org.keycloak:keycloak-dependencies-server-m...

org.keycloak:keycloak-dependencies-server-all (11.0.2), org.keycloak:keycloak-server-feature-pack (11.0.2) +3 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (11.0.2)

org.keycloak:keycloak-ldap-federation MAVEN version 11.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 11.0.2 -...

org.keycloak:keycloak-dependencies-server-all (1.0.1.final), org.keycloak:keycloak-server (1.0.1.final) potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (1.0.1.final)

org.keycloak:keycloak-ldap-federation MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.0.1.final -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.7), com.github.vzakharchenko:cisco-radius-plugin (1.3.7) +15 more potentially affected by CVE-2026-9801 via org.keycloak:keycloak-ldap-federation (13.0.1)

org.keycloak:keycloak-ldap-federation MAVEN version 13.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-ldap-federation and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.7 -...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (>=1.0.2, <=1.1.0-alpha.1), org.keycloak:keycloak-account-freemarker (1.0.4.final) +4 more potentially affected by CVE-2026-9802 via org.keycloak:keycloak-services (1.0.4.final)

org.keycloak:keycloak-services MAVEN version 1.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server =1.0.2, =1.1.0-alpha.1 -...