GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2026:68277

Vulnerability from csaf_redhat - Published: 2026-09-16 15:46 - Updated: 2026-09-16 18:34
Summary
Red Hat Security Advisory: Red Hat build of Keycloak 26.6.7 Images Security Update
Severity
Important
Notes
Topic: New images are available for Red Hat build of Keycloak 26.6.7 and Red Hat build of Keycloak 26.6.7 Operator, running on OpenShift Container Platform
Details: Red Hat build of Keycloak is an integrated sign-on solution, available as a Red Hat JBoss Middleware for OpenShift containerized image. The Red Hat build of Keycloak for OpenShift image provides an authentication server that you can use to log in centrally, log out, and register. You can also manage user accounts for web applications, mobile applications, and RESTful web services. Red Hat build of Keycloak Operator for OpenShift simplifies deployment and management of Keycloak 26.6.7 clusters. This erratum releases new images for Red Hat build of Keycloak 26.6.7 for use within the OpenShift Container Platform cloud computing Platform-as-a-Service (PaaS) for on-premise or private cloud deployments, aligning with the standalone product release. Security fixes: * Group hierarchy search discloses hidden parent groups under FGAP v2 (CVE-2026-15945) * Organization invitation link exposure allows unauthorized member creation (CVE-2026-16072) * Authorization codes can be retargeted to another client session (CVE-2026-16089) * Required signed-JWT assertion policy can be bypassed with unsigned assertion headers (CVE-2026-16093) * Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins (CVE-2026-16104) * Missing per-role authorization on RoleContainerResource composite endpoints (CVE-2026-16105) * Incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles (CVE-2026-16106) * Realm default-group reads disclose hidden groups under FGAP v2 (CVE-2026-16108) * Information disclosure via role-users endpoint bypasses per-user view filter (CVE-2026-17059) * Privilege escalation via impersonation role allows takeover of realm administrator accounts (CVE-2026-17526) * RESTeasy SourceProvider remote unauthenticated file read (CVE-2026-17615) * Generic identity-provider creation can bind brokers to organizations without manage-organizations (CVE-2026-18201) * OIDC redirect_uri fragment bypass in HTTP parameter pollution check (CVE-2026-18209) * SAML Redirect DEFLATE helpers leak native zlib state (CVE-2026-18212) * Google external access-token exchange bypasses hosted-domain restriction (CVE-2026-18214) * Microsoft external access-token exchange bypasses configured tenant (CVE-2026-18215) * Client not-before revocation ignored when realm not-before is older but nonzero (CVE-2026-18218) * Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed (CVE-2026-18570) * FGAP V2 group assignment bypass during user creation (CVE-2026-18571) * UMA claim token can override authorization time-policy evaluation attributes (CVE-2026-18572) * Client access-type policy condition bypass during client update (CVE-2026-18573) * Broker-originated username collision causes account lockout (CVE-2026-19607) * Incomplete fix for arbitrary filesystem path probing via keystore parameters (CVE-2026-19729) * Remote Code Execution via prototype pollution in Framework Mode (CVE-2026-42211) * TLS hostname verification bypass via OpenSSL client path misconfiguration (CVE-2026-62243) * Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments (CVE-2026-74909) * unauthenticated DoS via unbounded locale caching (CVE-2026-79651) * JWT Bearer authorization grant does not enforce consentRequired (CVE-2026-79652)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-15945

A flaw was found in the group search functionality of the Keycloak server's administrative API. When Fine-Grained Admin Permissions (FGAP) v2 is enabled, a delegated administrator can bypass access restrictions to view parent groups they are not authorized to see. By searching for a child group they have permission to view, the system incorrectly returns the full details of the parent group in the response, leading to the disclosure of sensitive group attributes and configuration.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-639 - Authorization Bypass Through User-Controlled Key
Affected products
Product Identifier Version Remediation
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64 —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64 —
Vendor Fix fix
Unresolved product id: 9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64 —
Vendor Fix fix
Threats
Impact Moderate
CVE-2026-16072

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface. By using this link, the administrator can create new user accounts and add them to the organization without having the required user management permissions or access to the invited email account. This allows an administrator to bypass security boundaries and add unauthorized members to an organization.

4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16089

A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 authorization codes are not properly bound to the client that originally requested them. An attacker who can intercept an authorization code can modify it to be redeemed by their own client, potentially allowing them to obtain access tokens for a victim's identity.

5.4 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N
CWE-472 - External Control of Assumed-Immutable Web Parameter
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16093

Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credentials can provide a fake, unsigned assertion header that tricks the system into thinking the policy requirements have been met. This allows the attacker to authenticate using simpler methods like a client secret even when the administrator has mandated more secure, signed assertions.

5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-807 - Reliance on Untrusted Inputs in a Security Decision
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16104

A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys, when they are requested by administrators with view-only permissions. This can lead to the exposure of third-party service credentials to unauthorized personnel or through administrative logs.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-212 - Improper Removal of Sensitive Information Before Storage or Transfer
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16105

A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remove essential child roles from built-in admin roles, potentially disrupting administrative functions within a realm.

4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CWE-639 - Authorization Bypass Through User-Controlled Key
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16106

A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role from a composite role. Due to missing authorization checks, an attacker with limited administrative permissions can remove privileged roles they are not authorized to manage, leading to a loss of access for other users and administrators.

4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CWE-1220 - Insufficient Granularity of Access Control
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-16108

A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and identifiers of hidden default groups, even if they lack the specific permissions to view those groups. This can lead to the exposure of sensitive organizational structures or internal group names.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-1220 - Insufficient Granularity of Access Control
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-17059

A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of a role. This allows a restricted administrator to see private information, such as names and email addresses, for users they should not be able to access.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-639 - Authorization Bypass Through User-Controlled Key
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-17526

Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full administrative control over the realm, including the ability to manage users, clients, and roles.

7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-17615

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-611 - Improper Restriction of XML External Entity Reference
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-18201

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that organization. This could allow an unauthorized administrator to influence how users log into specific organizations.

5.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18209

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. When a client is configured with a wildcard redirect URI, an attacker can use this to inject duplicate security parameters into the login response. If a client application is not configured correctly, it might trust the attacker's injected data instead of the real security information from Keycloak, leading to session fixation or account confusion.

3.4 (Low)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-1288 - Improper Validation of Consistency within Input
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Low
CVE-2026-18212

A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the custom DEFLATE compression and decompression helpers fail to release native zlib memory after use. An unauthenticated attacker can exploit this by sending repeated malformed SAML requests, leading to native memory exhaustion and a denial of service.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-401 - Missing Release of Memory after Effective Lifetime
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-18214

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This means an attacker with a valid Google account from a different domain could bypass the security check and gain access to the Keycloak realm.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18215

Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely different organization could gain access to the Keycloak realm, potentially accessing sensitive data or performing unauthorized actions.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-287 - Improper Authentication
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18218

A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application (client) using a "not-before" policy, the revocation may be silently ignored if the overall security realm already has an older, non-zero revocation policy in place. This issue can allow previously issued tokens to remain valid for refreshing sessions and accessing user information even after an administrator has attempted to invalidate them. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4.2 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18570

A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The issue occurs because the executor only validates the fullScopeAllowed field when it is explicitly provided in a request. By omitting this field, a delegated user can bypass the policy, resulting in a client created with full scope access. This allows the client to obtain tokens with unauthorized role mappings.

5.4 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18571

A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could lead to unauthorized access to sensitive information or elevated privileges for the newly created users.

6.6 (Medium)
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18572

Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). A flaw was discovered where a user can include a fake time value in their authorization request that overrides the actual server time. This allows the user to bypass these time-based restrictions and access protected resources at unauthorized times.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-863 - Incorrect Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-18573

A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper evaluation of the client state during an update operation, an attacker with client management permissions can bypass these security policies by first creating a public client and then updating it to a confidential client with weaker authentication. This can result in the persistence of clients that do not comply with the intended security hardening of the realm.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to trigger a collision in Keycloak, which results in the legitimate user being locked out of their account.

5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-287 - Improper Authentication
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-19729

A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keystore parameters. This can be used to determine the existence and readability of files on the server, potentially exposing sensitive system information.

4.9 (Medium)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
CVE-2026-42211

A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.

8.1 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-62243

A flaw was found in Netty (io.netty:netty-handler). When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping (Java 25+), TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a fraudulent certificate for a different hostname, which is then accepted without proper validation. This could lead to sensitive information disclosure.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-74909

Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the enforcer fails to correctly normalize web addresses that contain special encoded characters, such as those representing semicolons or directory traversal segments. An authenticated user can use these encoded characters to trick the enforcer into applying a less restrictive security policy than intended, potentially gaining unauthorized access to sensitive administrative or private application endpoints.

8.1 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-79651

A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Important
CVE-2026-79652

A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to check if a client requires user consent before issuing a token. This allows an authenticated attacker with valid client credentials and a trusted identity provider assertion to bypass the consent requirement and obtain unauthorized access to a user account at a consent-gated client.

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N
CWE-862 - Missing Authorization
Affected products
Fixed 9 products, the same list as for CVE-2026-15945
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:68277 self
https://access.redhat.com/security/updates/classi… external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-15945 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501302 external
https://www.cve.org/CVERecord?id=CVE-2026-15945 external
https://nvd.nist.gov/vuln/detail/CVE-2026-15945 external
https://access.redhat.com/security/cve/CVE-2026-16072 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501721 external
https://www.cve.org/CVERecord?id=CVE-2026-16072 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16072 external
https://access.redhat.com/security/cve/CVE-2026-16089 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501724 external
https://www.cve.org/CVERecord?id=CVE-2026-16089 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16089 external
https://access.redhat.com/security/cve/CVE-2026-16093 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501729 external
https://www.cve.org/CVERecord?id=CVE-2026-16093 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16093 external
https://access.redhat.com/security/cve/CVE-2026-16104 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501737 external
https://www.cve.org/CVERecord?id=CVE-2026-16104 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16104 external
https://access.redhat.com/security/cve/CVE-2026-16105 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501738 external
https://www.cve.org/CVERecord?id=CVE-2026-16105 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16105 external
https://access.redhat.com/security/cve/CVE-2026-16106 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501739 external
https://www.cve.org/CVERecord?id=CVE-2026-16106 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16106 external
https://access.redhat.com/security/cve/CVE-2026-16108 self
https://bugzilla.redhat.com/show_bug.cgi?id=2501740 external
https://www.cve.org/CVERecord?id=CVE-2026-16108 external
https://nvd.nist.gov/vuln/detail/CVE-2026-16108 external
https://access.redhat.com/security/cve/CVE-2026-17059 self
https://bugzilla.redhat.com/show_bug.cgi?id=2506746 external
https://www.cve.org/CVERecord?id=CVE-2026-17059 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17059 external
https://access.redhat.com/security/cve/CVE-2026-17526 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507409 external
https://www.cve.org/CVERecord?id=CVE-2026-17526 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17526 external
https://access.redhat.com/security/cve/CVE-2026-17615 self
https://bugzilla.redhat.com/show_bug.cgi?id=2507635 external
https://www.cve.org/CVERecord?id=CVE-2026-17615 external
https://nvd.nist.gov/vuln/detail/CVE-2026-17615 external
https://access.redhat.com/security/cve/CVE-2026-18201 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508290 external
https://www.cve.org/CVERecord?id=CVE-2026-18201 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18201 external
https://access.redhat.com/security/cve/CVE-2026-18209 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508305 external
https://www.cve.org/CVERecord?id=CVE-2026-18209 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18209 external
https://access.redhat.com/security/cve/CVE-2026-18212 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508307 external
https://www.cve.org/CVERecord?id=CVE-2026-18212 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18212 external
https://access.redhat.com/security/cve/CVE-2026-18214 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508308 external
https://www.cve.org/CVERecord?id=CVE-2026-18214 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18214 external
https://access.redhat.com/security/cve/CVE-2026-18215 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508309 external
https://www.cve.org/CVERecord?id=CVE-2026-18215 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18215 external
https://access.redhat.com/security/cve/CVE-2026-18218 self
https://bugzilla.redhat.com/show_bug.cgi?id=2508313 external
https://www.cve.org/CVERecord?id=CVE-2026-18218 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18218 external
https://access.redhat.com/security/cve/CVE-2026-18570 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509756 external
https://www.cve.org/CVERecord?id=CVE-2026-18570 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18570 external
https://access.redhat.com/security/cve/CVE-2026-18571 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509759 external
https://www.cve.org/CVERecord?id=CVE-2026-18571 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18571 external
https://access.redhat.com/security/cve/CVE-2026-18572 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509763 external
https://www.cve.org/CVERecord?id=CVE-2026-18572 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18572 external
https://access.redhat.com/security/cve/CVE-2026-18573 self
https://bugzilla.redhat.com/show_bug.cgi?id=2509764 external
https://www.cve.org/CVERecord?id=CVE-2026-18573 external
https://nvd.nist.gov/vuln/detail/CVE-2026-18573 external
https://access.redhat.com/security/cve/CVE-2026-19607 self
https://bugzilla.redhat.com/show_bug.cgi?id=2514529 external
https://www.cve.org/CVERecord?id=CVE-2026-19607 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19607 external
https://access.redhat.com/security/cve/CVE-2026-19729 self
https://bugzilla.redhat.com/show_bug.cgi?id=2515294 external
https://www.cve.org/CVERecord?id=CVE-2026-19729 external
https://nvd.nist.gov/vuln/detail/CVE-2026-19729 external
https://access.redhat.com/security/cve/CVE-2026-42211 self
https://bugzilla.redhat.com/show_bug.cgi?id=2484115 external
https://www.cve.org/CVERecord?id=CVE-2026-42211 external
https://nvd.nist.gov/vuln/detail/CVE-2026-42211 external
https://github.com/remix-run/react-router/securit… external
https://access.redhat.com/security/cve/CVE-2026-62243 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521309 external
https://www.cve.org/CVERecord?id=CVE-2026-62243 external
https://nvd.nist.gov/vuln/detail/CVE-2026-62243 external
https://github.com/netty/netty/security/advisorie… external
https://www.vulncheck.com/advisories/netty-throug… external
https://access.redhat.com/security/cve/CVE-2026-74909 self
https://bugzilla.redhat.com/show_bug.cgi?id=2517354 external
https://www.cve.org/CVERecord?id=CVE-2026-74909 external
https://nvd.nist.gov/vuln/detail/CVE-2026-74909 external
https://access.redhat.com/security/cve/CVE-2026-79651 self
https://bugzilla.redhat.com/show_bug.cgi?id=2523345 external
https://www.cve.org/CVERecord?id=CVE-2026-79651 external
https://nvd.nist.gov/vuln/detail/CVE-2026-79651 external
https://access.redhat.com/security/cve/CVE-2026-79652 self
https://bugzilla.redhat.com/show_bug.cgi?id=2523347 external
https://www.cve.org/CVERecord?id=CVE-2026-79652 external
https://nvd.nist.gov/vuln/detail/CVE-2026-79652 external
Acknowledgments
Trail of Bits in collaboration with OpenAI Paul Bottinelli
localhost-detect
Independent Security Researcher Owais Lone (thesecguy)
Orionexe
Leon Zlobecki
default-cybe
robinho11842
NetSPI Anurag Mondal
Audax Financial Technology
IBM Stefan Guilhen
yd1ng
Johan Wahyudi
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "New images are available for Red Hat build of Keycloak 26.6.7 and\nRed Hat build of Keycloak 26.6.7 Operator, running on OpenShift\nContainer Platform",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat build of Keycloak is an integrated sign-on solution,\navailable as a Red Hat JBoss Middleware for OpenShift containerized\nimage. The Red Hat build of Keycloak for OpenShift image provides\nan authentication server that you can use to log in centrally, log\nout, and register. You can also manage user accounts for web\napplications, mobile applications, and RESTful web services.\n\nRed Hat build of Keycloak Operator for OpenShift simplifies\ndeployment and management of Keycloak 26.6.7 clusters.\n\nThis erratum releases new images for Red Hat build of Keycloak\n26.6.7 for use within the OpenShift Container Platform cloud\ncomputing Platform-as-a-Service (PaaS) for on-premise or private\ncloud deployments, aligning with the standalone product release.\n\nSecurity fixes:\n* Group hierarchy search discloses hidden parent groups under FGAP v2 (CVE-2026-15945)\n* Organization invitation link exposure allows unauthorized member creation (CVE-2026-16072)\n* Authorization codes can be retargeted to another client session (CVE-2026-16089)\n* Required signed-JWT assertion policy can be bypassed with unsigned assertion headers (CVE-2026-16093)\n* Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins (CVE-2026-16104)\n* Missing per-role authorization on RoleContainerResource composite endpoints (CVE-2026-16105)\n* Incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles (CVE-2026-16106)\n* Realm default-group reads disclose hidden groups under FGAP v2 (CVE-2026-16108)\n* Information disclosure via role-users endpoint bypasses per-user view filter (CVE-2026-17059)\n* Privilege escalation via impersonation role allows takeover of realm administrator accounts (CVE-2026-17526)\n* RESTeasy SourceProvider remote unauthenticated file read (CVE-2026-17615)\n* Generic identity-provider creation can bind brokers to organizations without manage-organizations (CVE-2026-18201)\n* OIDC redirect_uri fragment bypass in HTTP parameter pollution check (CVE-2026-18209)\n* SAML Redirect DEFLATE helpers leak native zlib state (CVE-2026-18212)\n* Google external access-token exchange bypasses hosted-domain restriction (CVE-2026-18214)\n* Microsoft external access-token exchange bypasses configured tenant (CVE-2026-18215)\n* Client not-before revocation ignored when realm not-before is older but nonzero (CVE-2026-18218)\n* Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed (CVE-2026-18570)\n* FGAP V2 group assignment bypass during user creation (CVE-2026-18571)\n* UMA claim token can override authorization time-policy evaluation attributes (CVE-2026-18572)\n* Client access-type policy condition bypass during client update (CVE-2026-18573)\n* Broker-originated username collision causes account lockout (CVE-2026-19607)\n* Incomplete fix for arbitrary filesystem path probing via keystore parameters (CVE-2026-19729)\n* Remote Code Execution via prototype pollution in Framework Mode (CVE-2026-42211)\n* TLS hostname verification bypass via OpenSSL client path misconfiguration (CVE-2026-62243)\n* Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments (CVE-2026-74909)\n* unauthenticated DoS via unbounded locale caching (CVE-2026-79651)\n* JWT Bearer authorization grant does not enforce consentRequired (CVE-2026-79652)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:68277",
        "url": "https://access.redhat.com/errata/RHSA-2026:68277"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68277.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat build of Keycloak 26.6.7 Images Security Update",
    "tracking": {
      "current_release_date": "2026-09-16T18:34:54+00:00",
      "generator": {
        "date": "2026-09-16T18:34:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.21"
        }
      },
      "id": "RHSA-2026:68277",
      "initial_release_date": "2026-09-16T15:46:54+00:00",
      "revision_history": [
        {
          "date": "2026-09-16T15:46:54+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-16T15:46:54+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-16T18:34:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.6",
                "product": {
                  "name": "Red Hat build of Keycloak 26.6",
                  "product_id": "9Base-RHBK-26.6",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.6::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Keycloak"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96?arch=s390x\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9\u0026tag=26.6-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6?arch=s390x\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator\u0026tag=26.6-20"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059?arch=ppc64le\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9\u0026tag=26.6-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788?arch=ppc64le\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator\u0026tag=26.6-20"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4?arch=arm64\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9\u0026tag=26.6-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2?arch=arm64\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator\u0026tag=26.6-20"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6?arch=amd64\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9\u0026tag=26.6-20"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b?arch=amd64\u0026repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle\u0026tag=26.6.7-3"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356?arch=amd64\u0026repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator\u0026tag=26.6-20"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64 as a component of Red Hat build of Keycloak 26.6",
          "product_id": "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-15945",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "discovery_date": "2026-07-14T15:31:04+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501302"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the group search functionality of the Keycloak server\u0027s administrative API. When Fine-Grained Admin Permissions (FGAP) v2 is enabled, a delegated administrator can bypass access restrictions to view parent groups they are not authorized to see. By searching for a child group they have permission to view, the system incorrectly returns the full details of the parent group in the response, leading to the disclosure of sensitive group attributes and configuration.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Group hierarchy search discloses hidden parent groups under FGAP v2",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires an authenticated attacker with specific delegated administrative permissions and the non-default FGAP v2 feature to be enabled. Successful exploitation allows an attacker to disclose sensitive metadata and configuration details of parent groups they are otherwise restricted from viewing. The vulnerability\u0027s root cause is a failure to apply fine-grained access control filters to parent groups during hierarchical search result construction.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-15945"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501302",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501302"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-15945",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-15945"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15945",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15945"
        }
      ],
      "release_date": "2026-07-14T15:31:04+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Group hierarchy search discloses hidden parent groups under FGAP v2"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-16072",
      "cwe": {
        "id": "CWE-497",
        "name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
      },
      "discovery_date": "2026-07-16T17:09:24+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501721"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface. By using this link, the administrator can create new user accounts and add them to the organization without having the required user management permissions or access to the invited email account. This allows an administrator to bypass security boundaries and add unauthorized members to an organization.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Organization invitation link exposure allows unauthorized member creation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to already possess high-level administrative privileges (manage-organizations). Successful exploitation allows an attacker to bypass the manage-users permission boundary to create new managed user accounts and add them to an organization without mailbox verification. The vulnerability\u0027s root cause is the unintended exposure of the registration bearer link in the REST API response for pending invitations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16072"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501721",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501721"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16072"
        }
      ],
      "release_date": "2026-07-16T17:09:24+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Organization invitation link exposure allows unauthorized member creation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-16089",
      "cwe": {
        "id": "CWE-472",
        "name": "External Control of Assumed-Immutable Web Parameter"
      },
      "discovery_date": "2026-07-17T12:17:39+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501724"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the keycloak-services component of Red Hat Build of Keycloak. The issue occurs because OAuth 2.0 authorization codes are not properly bound to the client that originally requested them. An attacker who can intercept an authorization code can modify it to be redeemed by their own client, potentially allowing them to obtain access tokens for a victim\u0027s identity.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Authorization codes can be retargeted to another client session",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to intercept a valid authorization code and have a registered client in the same realm. Successful exploitation allows an attacker to retarget an authorization code to their own client and obtain tokens for the victim\u0027s identity. The vulnerability\u0027s root cause is the lack of binding between the authorization code and the issuing client identifier in the code payload.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16089"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501724",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501724"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16089",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16089"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16089",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16089"
        }
      ],
      "release_date": "2026-07-17T12:17:39+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Authorization codes can be retargeted to another client session"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-16093",
      "cwe": {
        "id": "CWE-807",
        "name": "Reliance on Untrusted Inputs in a Security Decision"
      },
      "discovery_date": "2026-07-16T17:01:13+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501729"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credentials can provide a fake, unsigned assertion header that tricks the system into thinking the policy requirements have been met. This allows the attacker to authenticate using simpler methods like a client secret even when the administrator has mandated more secure, signed assertions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Required signed-JWT assertion policy can be bypassed with unsigned assertion headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that the attacker must already possess valid client credentials to perform the bypass. Successful exploitation allows an attacker to bypass mandatory signed-JWT assertion policies by providing unsigned headers. The vulnerability\u0027s root cause is insufficient validation of the client assertion parameters and authentication method within the client policy executor.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16093"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501729",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501729"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16093",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16093"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16093",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16093"
        }
      ],
      "release_date": "2026-07-16T17:01:13+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Required signed-JWT assertion policy can be bypassed with unsigned assertion headers"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-16104",
      "cwe": {
        "id": "CWE-212",
        "name": "Improper Removal of Sensitive Information Before Storage or Transfer"
      },
      "discovery_date": "2026-07-15T13:25:50+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501737"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engine for Red Hat Build of Keycloak identity and access management. The issue occurs because the system fails to mask sensitive configuration values, such as reCAPTCHA secret keys, when they are requested by administrators with view-only permissions. This can lead to the exposure of third-party service credentials to unauthorized personnel or through administrative logs.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires the attacker to have authenticated administrative access with at least view-realm permissions. Successful exploitation allows an attacker to retrieve raw reCAPTCHA secrets and view them in administrative event logs. The vulnerability\u0027s root cause is the improper handling of sensitive configuration fields during the conversion of internal models to their API representations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16104"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501737",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501737"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16104",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16104"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16104",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16104"
        }
      ],
      "release_date": "2026-07-15T13:25:50+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Authenticator config endpoint exposes raw reCAPTCHA secrets to view-only admins"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "localhost-detect"
          ]
        }
      ],
      "cve": "CVE-2026-16105",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "discovery_date": "2026-07-15T11:24:02+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501738"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the RoleContainerResource component of Keycloak. The issue occurs because certain name-based endpoints in the admin REST API do not properly enforce authorization checks when managing composite roles. This allows a delegated administrator with manage-realm permissions to remove essential child roles from built-in admin roles, potentially disrupting administrative functions within a realm.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Missing per-role authorization on RoleContainerResource composite endpoints",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to already possess high-level delegated administrative privileges (manage-realm). Successful exploitation allows an attacker to remove child roles from built-in admin roles, leading to a loss of integrity for administrative configurations. The vulnerability\u0027s root cause is an incomplete fix for a previous issue, where authorization checks were not consistently applied to name-based REST API endpoints.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16105"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501738",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501738"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16105",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16105"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16105",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16105"
        }
      ],
      "release_date": "2026-07-15T11:24:02+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Missing per-role authorization on RoleContainerResource composite endpoints"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Owais Lone (thesecguy)"
          ],
          "organization": "Independent Security Researcher"
        }
      ],
      "cve": "CVE-2026-16106",
      "cwe": {
        "id": "CWE-1220",
        "name": "Insufficient Granularity of Access Control"
      },
      "discovery_date": "2026-07-15T07:28:13+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501739"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when a delegated administrator attempts to remove a child role from a composite role. Due to missing authorization checks, an attacker with limited administrative permissions can remove privileged roles they are not authorized to manage, leading to a loss of access for other users and administrators.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to already possess high-level delegated administrative privileges. Successful exploitation allows an attacker to remove privileged child roles from composites, leading to the unauthorized removal of administrative or functional roles from other users. The vulnerability\u0027s root cause is a missing per-child authorization check in the role-composite deletion REST API endpoints.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16106"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501739",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501739"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16106",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16106"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16106",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16106"
        }
      ],
      "release_date": "2026-07-15T07:28:13+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-16108",
      "cwe": {
        "id": "CWE-1220",
        "name": "Insufficient Granularity of Access Control"
      },
      "discovery_date": "2026-07-15T07:21:48+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2501740"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the default-groups REST endpoint and realm representation of Keycloak. This component is responsible for managing groups that are automatically assigned to new users within a realm. The issue allows a delegated administrator with realm-viewing permissions to see the names and identifiers of hidden default groups, even if they lack the specific permissions to view those groups. This can lead to the exposure of sensitive organizational structures or internal group names.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Realm default-group reads disclose hidden groups under FGAP v2",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires the attacker to already possess delegated administrative privileges and for FGAP v2 to be enabled. Successful exploitation allows an attacker to disclose the names and identifiers of groups they are not authorized to view. The vulnerability\u0027s root cause is a missing permission check in the default-groups REST endpoint and realm representation logic.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-16108"
        },
        {
          "category": "external",
          "summary": "RHBZ#2501740",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501740"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-16108",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-16108"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16108",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16108"
        }
      ],
      "release_date": "2026-07-15T07:21:48+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Realm default-group reads disclose hidden groups under FGAP v2"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Orionexe"
          ]
        }
      ],
      "cve": "CVE-2026-17059",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "discovery_date": "2026-07-24T13:30:05+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2506746"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the role-users endpoint of the keycloak-services library, which is the core component of the Keycloak identity and access management solution. The issue occurs because the system fails to check if an administrator has permission to view individual users when listing members of a role. This allows a restricted administrator to see private information, such as names and email addresses, for users they should not be able to access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Information disclosure via role-users endpoint bypasses per-user view filter",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to already possess a restricted administrator account. Successful exploitation allows an attacker to disclose sensitive personal identifiable information PII of users within the realm that they are otherwise restricted from viewing. The vulnerabilitys root cause is a missing authorization check on the role-users API endpoint.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17059"
        },
        {
          "category": "external",
          "summary": "RHBZ#2506746",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2506746"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17059",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17059"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17059",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17059"
        }
      ],
      "release_date": "2026-07-24T13:30:05+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Information disclosure via role-users endpoint bypasses per-user view filter"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Orionexe"
          ]
        }
      ],
      "cve": "CVE-2026-17526",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-24T14:08:46+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507409"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak is an open-source identity and access management solution. A vulnerability was discovered where a user with the impersonation role can impersonate a realm administrator. This allows the attacker to gain full administrative control over the realm, including the ability to manage users, clients, and roles.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Privilege escalation via impersonation role allows takeover of realm administrator accounts",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that the attacker must already possess the impersonation role. Successful exploitation allows an attacker to gain full administrative control over the realm. The vulnerability\u0027s root cause is a missing privilege-level check on the target user during the impersonation process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507409",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507409"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17526"
        }
      ],
      "release_date": "2026-09-16T12:58:17+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak-services: keycloak-services: Privilege escalation via impersonation role allows takeover of realm administrator accounts"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Leon Zlobecki"
          ]
        }
      ],
      "cve": "CVE-2026-17615",
      "cwe": {
        "id": "CWE-611",
        "name": "Improper Restriction of XML External Entity Reference"
      },
      "discovery_date": "2026-07-27T19:27:51.528000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2507635"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in RESTEasy\u0027s SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "resteasy-core: RESTeasy SourceProvider remote unauthenticated file read",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This flaw allows unauthenticated remote file disclosure due to improper XML external entity (XXE) resolution in RESTEasy\u0027s SourceProvider. An attacker can exploit this by sending a crafted XML request to an exposed endpoint that processes `application/xml` and returns `Source` or `StreamSource` types, leading to the disclosure of sensitive server-side files. This affects applications utilizing RESTEasy where endpoints are configured to accept XML input and return `Source` or `StreamSource` objects, potentially exposing sensitive data on Red Hat supported products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-17615"
        },
        {
          "category": "external",
          "summary": "RHBZ#2507635",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507635"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-17615",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-17615"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-17615",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-17615"
        }
      ],
      "release_date": "2026-08-31T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid exposing RESTEasy endpoints that return Source or StreamSource types. Alternatively, implement a custom MessageBodyWriter for Source types that explicitly applies XML security features to the SAXParserFactory before parsing. Changes to application configuration or code typically require an application redeployment or restart to take effect.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "resteasy-core: RESTeasy SourceProvider remote unauthenticated file read"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18201",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-28T13:49:10+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508290"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that organization. This could allow an unauthorized administrator to influence how users log into specific organizations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Generic identity-provider creation can bind brokers to organizations without manage-organizations",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires high-privileged administrative access (manage-identity-providers) to exploit. Successful exploitation allows an attacker to associate identity brokers with organizations they are not authorized to manage, potentially influencing login flows. The vulnerability\u0027s root cause is a missing authorization check in the generic identity-provider creation REST endpoint.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18201"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508290",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508290"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18201",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18201"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18201",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18201"
        }
      ],
      "release_date": "2026-07-28T13:49:10+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Generic identity-provider creation can bind brokers to organizations without manage-organizations"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "default-cybe"
          ]
        }
      ],
      "cve": "CVE-2026-18209",
      "cwe": {
        "id": "CWE-1288",
        "name": "Improper Validation of Consistency within Input"
      },
      "discovery_date": "2026-07-28T13:13:11+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. When a client is configured with a wildcard redirect URI, an attacker can use this to inject duplicate security parameters into the login response. If a client application is not configured correctly, it might trust the attacker\u0027s injected data instead of the real security information from Keycloak, leading to session fixation or account confusion.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: OIDC redirect_uri fragment bypass in HTTP parameter pollution check",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Low, given that it requires a specific client configuration and a non-conformant relying party to be successful. Successful exploitation allows an attacker to inject duplicate OIDC response parameters into the redirect URI fragment. The vulnerability\u0027s root cause is an incomplete validation check in RedirectUtils that fails to inspect the URI fragment for forbidden parameters.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18209"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18209",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18209"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18209",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18209"
        }
      ],
      "release_date": "2026-07-28T13:13:11+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.4,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "keycloak-services: keycloak-services: OIDC redirect_uri fragment bypass in HTTP parameter pollution check"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18212",
      "cwe": {
        "id": "CWE-401",
        "name": "Missing Release of Memory after Effective Lifetime"
      },
      "discovery_date": "2026-07-28T12:27:32+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity and access management solution. The issue occurs because the custom DEFLATE compression and decompression helpers fail to release native zlib memory after use. An unauthenticated attacker can exploit this by sending repeated malformed SAML requests, leading to native memory exhaustion and a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it can be exploited by a remote, unauthenticated attacker. Successful exploitation allows an attacker to cause a complete denial of service by exhausting the native memory of the Keycloak process. The vulnerability root cause is the failure to explicitly release native zlib resources in the SAML DEFLATE helper classes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18212"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18212",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18212"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18212",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18212"
        }
      ],
      "release_date": "2026-09-16T12:57:23+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak-services: keycloak-services: SAML Redirect DEFLATE helpers leak native zlib state"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18214",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-28T12:19:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508308"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This means an attacker with a valid Google account from a different domain could bypass the security check and gain access to the Keycloak realm.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Google external access-token exchange bypasses hosted-domain restriction",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires the preview Token Exchange V1 feature to be enabled and specific client permissions to be granted. Successful exploitation allows an attacker to bypass Google hosted-domain restrictions and obtain unauthorized Keycloak tokens. The vulnerability\u0027s root cause is a missing validation check for the hosted-domain claim during the external access-token exchange process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18214"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508308",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508308"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18214",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18214"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18214",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18214"
        }
      ],
      "release_date": "2026-07-28T12:19:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Google external access-token exchange bypasses hosted-domain restriction"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18215",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "discovery_date": "2026-07-28T12:12:27+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508309"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant). A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely different organization could gain access to the Keycloak realm, potentially accessing sensitive data or performing unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Microsoft external access-token exchange bypasses configured tenant",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to possess a valid Microsoft Graph access token from a different tenant. Successful exploitation allows an attacker to bypass configured tenant restrictions and gain unauthorized access to a Keycloak realm. The vulnerability\u0027s root cause is the lack of tenant ID verification during the external access-token exchange flow when interacting with the Microsoft Graph API.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18215"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508309",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508309"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18215",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18215"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18215",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18215"
        }
      ],
      "release_date": "2026-07-28T12:12:27+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Microsoft external access-token exchange bypasses configured tenant"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18218",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-24T13:46:56+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2508313"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application (client) using a \"not-before\" policy, the revocation may be silently ignored if the overall security realm already has an older, non-zero revocation policy in place. This issue can allow previously issued tokens to remain valid for refreshing sessions and accessing user information even after an administrator has attempted to invalidate them.\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Client not-before revocation ignored when realm not-before is older but nonzero",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires a specific pre-existing realm configuration and the possession of valid tokens issued within a specific timeframe. Successful exploitation allows an attacker to continue using revoked tokens for refresh, introspection, and UserInfo requests. The vulnerability\u0027s root cause is a logic error in the TokenManager.NotBeforeCheck function that fails to correctly enforce client-specific revocation policies when a realm-level policy is also present.\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18218"
        },
        {
          "category": "external",
          "summary": "RHBZ#2508313",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508313"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18218",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18218"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18218",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18218"
        }
      ],
      "release_date": "2026-07-24T13:46:56+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Client not-before revocation ignored when realm not-before is older but nonzero"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18570",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-30T10:49:43+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509756"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the full-scope-disabled client-policy executor within the keycloak-services component. This component is responsible for enforcing security policies during client registration and configuration in Red Hat Build of Keycloak. The issue occurs because the executor only validates the fullScopeAllowed field when it is explicitly provided in a request. By omitting this field, a delegated user can bypass the policy, resulting in a client created with full scope access. This allows the client to obtain tokens with unauthorized role mappings.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to have delegated client creation privileges and the realm must have a specific policy configuration. Successful exploitation allows an attacker to bypass client scope restrictions and obtain tokens with unauthorized permissions. The vulnerability\u0027s root cause is the failure of the policy executor to account for default server behavior when the fullScopeAllowed field is missing from a request.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18570"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509756",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509756"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18570",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18570"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18570",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18570"
        }
      ],
      "release_date": "2026-07-30T10:49:43+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Full-scope-disabled client policy validation bypass via omitted fullScopeAllowed"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "robinho11842"
          ]
        }
      ],
      "cve": "CVE-2026-18571",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-30T10:29:12+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509759"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the user creation component of Keycloak when Fine-Grained Admin Permissions V2 (FGAP V2) is enabled. This issue allows a sub-administrator with permission to create users to add those users to any group, even groups the sub-administrator is not authorized to manage. This could lead to unauthorized access to sensitive information or elevated privileges for the newly created users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: FGAP V2 group assignment bypass during user creation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that it requires the non-default Fine-Grained Admin Permissions V2 to be enabled and the attacker must already possess high-level sub-administrator privileges. Successful exploitation allows an attacker to bypass group membership restrictions during user creation, potentially leading to unauthorized privilege escalation for new users. The vulnerability\u0027s root cause is a missing authorization check for group assignments within the user creation API payload.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18571"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509759",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509759"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18571",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18571"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18571",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18571"
        }
      ],
      "release_date": "2026-07-30T10:29:12+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: FGAP V2 group assignment bypass during user creation"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18572",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "discovery_date": "2026-07-30T10:07:47+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509763"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak provides authorization services that allow administrators to restrict access to resources based on time policies (for example, only allowing access during business hours). A flaw was discovered where a user can include a fake time value in their authorization request that overrides the actual server time. This allows the user to bypass these time-based restrictions and access protected resources at unauthorized times.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: UMA claim token can override authorization time-policy evaluation attributes",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to be an authenticated user and the target resource must be specifically protected by a time-based authorization policy. Successful exploitation allows an attacker to bypass temporal access controls and obtain permissions outside of allowed time windows. The vulnerability\u0027s root cause is the improper merging of user-supplied claims which allows them to overwrite trusted server-side evaluation attributes.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18572"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509763",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509763"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18572",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18572"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18572",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18572"
        }
      ],
      "release_date": "2026-07-30T10:07:47+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: UMA claim token can override authorization time-policy evaluation attributes"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Paul Bottinelli"
          ],
          "organization": "Trail of Bits in collaboration with OpenAI"
        }
      ],
      "cve": "CVE-2026-18573",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-07-30T10:03:37+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2509764"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the keycloak-services component of Keycloak, which is used for managing authentication and authorization flows. The issue occurs when a realm administrator configures client policies to enforce specific authentication requirements on confidential clients. Due to improper evaluation of the client state during an update operation, an attacker with client management permissions can bypass these security policies by first creating a public client and then updating it to a confidential client with weaker authentication. This can result in the persistence of clients that do not comply with the intended security hardening of the realm.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Client access-type policy condition bypass during client update",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires existing client management privileges or a dynamic registration token. Successful exploitation allows an attacker to bypass realm-specific client policy conditions and persist confidential clients with weaker authentication than required by policy. The vulnerability\u0027s root cause is the evaluation of update operations against the previous client state rather than the proposed new state.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-18573"
        },
        {
          "category": "external",
          "summary": "RHBZ#2509764",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509764"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-18573",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-18573"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18573",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18573"
        }
      ],
      "release_date": "2026-07-30T10:03:37+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Client access-type policy condition bypass during client update"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Anurag Mondal"
          ],
          "organization": "NetSPI"
        }
      ],
      "cve": "CVE-2026-19607",
      "cwe": {
        "id": "CWE-287",
        "name": "Improper Authentication"
      },
      "discovery_date": "2026-08-11T20:44:22+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2514529"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to trigger a collision in Keycloak, which results in the legitimate user being locked out of their account.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Broker-originated username collision causes account lockout",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires the attacker to be able to register a specific email address on a trusted external Identity Provider. Successful exploitation allows an attacker to perform a targeted denial-of-service by locking a specific user out of their account. The vulnerability\u0027s root cause is a lack of collision prevention during the first-broker-login authentication flow.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19607"
        },
        {
          "category": "external",
          "summary": "RHBZ#2514529",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514529"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19607",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19607"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19607",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19607"
        }
      ],
      "release_date": "2026-09-16T13:01:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Broker-originated username collision causes account lockout"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Audax Financial Technology"
          ]
        }
      ],
      "cve": "CVE-2026-19729",
      "cwe": {
        "id": "CWE-22",
        "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
      },
      "discovery_date": "2026-08-13T08:57:26+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2515294"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the key provider component of the keycloak-services library, which is the core engine for the Red Hat Build of Keycloak. The issue occurs because a previous fix for path probing was incomplete, allowing a realm administrator to still submit arbitrary filesystem paths as keystore parameters. This can be used to determine the existence and readability of files on the server, potentially exposing sensitive system information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires high-level administrative privileges (manage-realm role). Successful exploitation allows an attacker to probe arbitrary filesystem paths to determine the existence and readability of files on the host system. The vulnerabilitys root cause is an incomplete input validation fix in the key provider component of keycloak-services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19729"
        },
        {
          "category": "external",
          "summary": "RHBZ#2515294",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515294"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19729",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19729"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19729",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19729"
        }
      ],
      "release_date": "2026-08-13T08:57:26+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: Incomplete fix for arbitrary filesystem path probing via keystore parameters"
    },
    {
      "cve": "CVE-2026-42211",
      "cwe": {
        "id": "CWE-915",
        "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
      },
      "discovery_date": "2026-06-02T20:02:06.557013+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2484115"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in React Router when operating in Framework Mode. A remote attacker could exploit an existing prototype pollution vulnerability within the application code. This could lead to unauthorized remote code execution (RCE) on the server through a two-step attack involving external requests. This vulnerability poses a significant risk, potentially allowing an attacker to take control of the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An Important remote code execution flaw exists in React Router versions 7.0.0 through 7.14.1 when utilized in Framework Mode. This vulnerability requires an existing prototype pollution flaw within the application to enable a two-step attack, leading to unauthorized remote code execution on the server. Red Hat products employing React Router in Declarative Mode or Data Mode are not impacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-42211"
        },
        {
          "category": "external",
          "summary": "RHBZ#2484115",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484115"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42211",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-42211"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42211"
        },
        {
          "category": "external",
          "summary": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h",
          "url": "https://github.com/remix-run/react-router/security/advisories/GHSA-49rj-9fvp-4h2h"
        }
      ],
      "release_date": "2026-06-02T18:18:46.706000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, ensure that applications using React Router are not configured in Framework Mode. Instead, utilize Declarative Mode (`\u003cBrowserRouter\u003e`) or Data Mode (`createBrowserRouter/\u003cRouterProvider\u003e`), as these modes are not susceptible to this flaw.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode"
    },
    {
      "cve": "CVE-2026-62243",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-08-22T12:51:41.376413+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521309"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Netty (io.netty:netty-handler). When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping (Java 25+), TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a fraudulent certificate for a different hostname, which is then accepted without proper validation. This could lead to sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat products ship io.netty:netty-handler as a transitive dependency across multiple middleware and platform products. While the CVSS score reflects the severity of a successful exploit \u2014 full confidentiality compromise of TLS-protected traffic without authentication \u2014 the vulnerable code path requires three conditions simultaneously: explicit OpenSSL provider configuration, a plain X509TrustManager, and a Java 25+ runtime. Most Red Hat product deployments use the default JDK SSL provider and currently run on Java 21 LTS, making the vulnerable configuration uncommon in practice.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-62243"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521309",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521309"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-62243",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-62243"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-62243",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62243"
        },
        {
          "category": "external",
          "summary": "https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c",
          "url": "https://github.com/netty/netty/security/advisories/GHSA-p85m-gvr3-788c"
        },
        {
          "category": "external",
          "summary": "https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass",
          "url": "https://www.vulncheck.com/advisories/netty-through-tls-hostname-verification-bypass"
        }
      ],
      "release_date": "2026-08-22T12:26:43.072000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "This vulnerability only affects applications that explicitly configure Netty to use the OpenSSL TLS provider (SslProvider.OPENSSL). \n\nThe following mitigations can reduce exposure without applying a patch:\n\n1) Use the default JDK SSL provider \u2014 Do not configure SslProvider.OPENSSL in your Netty SslContext setup. The default JDK SSL provider (SslProvider.JDK) is not affected by this vulnerability. Most applications use the JDK default unless explicitly overridden.\n\n2) Use X509ExtendedTrustManager \u2014 If the OpenSSL provider is required, ensure the configured trust manager extends X509ExtendedTrustManager rather than the plain X509TrustManager interface. The extended variant performs hostname verification independently of the Netty wrapping logic.\n\n3) Run on Java 24 or earlier \u2014 The vulnerable code path only triggers on Java 25+ where sun.misc.Unsafe-based trust-manager wrapping is unavailable. Running on earlier Java versions (e.g., Java 21 LTS) means the wrapping works correctly and hostname verification stays enabled.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Stefan Guilhen"
          ],
          "organization": "IBM"
        }
      ],
      "cve": "CVE-2026-74909",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-08-13T20:46:27+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2517354"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Keycloak provides a policy enforcer to protect applications by matching incoming web requests against defined security policies. A flaw was found where the enforcer fails to correctly normalize web addresses that contain special encoded characters, such as those representing semicolons or directory traversal segments. An authenticated user can use these encoded characters to trick the enforcer into applying a less restrictive security policy than intended, potentially gaining unauthorized access to sensitive administrative or private application endpoints.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it allows for a direct bypass of authorization controls. Successful exploitation allows an attacker to reach restricted endpoints they are not authorized to access. The vulnerability\u0027s root cause is an incomplete fix for a previous URI normalization flaw, where encoded characters are not properly handled before the security matching logic is applied.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-74909"
        },
        {
          "category": "external",
          "summary": "RHBZ#2517354",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517354"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-74909",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-74909"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-74909",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-74909"
        }
      ],
      "release_date": "2026-09-16T13:08:37+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak-services: keycloak-services: Incomplete fix for CVE-2026-15573 allows policy enforcer bypass via percent-encoded URI segments"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "yd1ng"
          ]
        }
      ],
      "cve": "CVE-2026-79651",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2026-08-21T10:24:34+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2523345"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authentication flows and theme management in Keycloak. The issue occurs because the system accepts arbitrary locale tags from unauthenticated requests and stores them in a permanent in-memory cache without limits. An attacker can exploit this by sending a large number of unique locale tags, eventually causing the server to run out of memory and crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: unauthenticated DoS via unbounded locale caching",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Important, given that it can be exploited by an unauthenticated remote attacker. Successful exploitation allows an attacker to cause a complete denial of service by crashing the Keycloak server. The vulnerability\u0027s root cause is the lack of bounds or validation on an in-memory cache used for theme localization, which can be exhausted by providing arbitrary locale tags.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-79651"
        },
        {
          "category": "external",
          "summary": "RHBZ#2523345",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523345"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-79651",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79651"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-79651",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79651"
        }
      ],
      "release_date": "2026-09-16T13:18:07+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "keycloak-services: keycloak-services: unauthenticated DoS via unbounded locale caching"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Johan Wahyudi"
          ]
        }
      ],
      "cve": "CVE-2026-79652",
      "cwe": {
        "id": "CWE-862",
        "name": "Missing Authorization"
      },
      "discovery_date": "2026-08-18T07:58:43+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2523347"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. This component handles various OAuth2 and OpenID Connect grant types used for issuing access tokens. The issue occurs because the JWT Bearer grant fails to check if a client requires user consent before issuing a token. This allows an authenticated attacker with valid client credentials and a trusted identity provider assertion to bypass the consent requirement and obtain unauthorized access to a user account at a consent-gated client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "keycloak-services: keycloak-services: JWT Bearer authorization grant does not enforce consentRequired",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate, given that exploitation requires a specific non-default client configuration and the possession of valid client credentials and a trusted IdP assertion. Successful exploitation allows an attacker to bypass user consent requirements and obtain an access token for a target user. The vulnerability\u0027s root cause is a missing authorization check in the JWT Bearer grant implementation that fails to honor the consentRequired configuration flag.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
          "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-79652"
        },
        {
          "category": "external",
          "summary": "RHBZ#2523347",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523347"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-79652",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79652"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-79652",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-79652"
        }
      ],
      "release_date": "2026-08-18T07:58:43+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-16T15:46:54+00:00",
          "details": "Before applying the update, back up your existing installation,\nincluding all applications, configuration files, databases and\ndatabase settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:68277"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.6:rhbk/keycloak-operator-bundle@sha256:214bd43b28c8f61d9c8f81f57e9dd3027d09cb3c00fb307bd265130147dd419b_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:17799b1e42dac3e81023c17319e0250b89d0fd689e2910b57443e311f2810ef2_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:9f74c98693761db4e065a3d7a28b04c8f60abcb37b6cc48bd4926cbbb5e3e788_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:de43455a4604ac89363ee40c3fe8f8641b905380413a1abd91ee7d3416e6a356_amd64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9-operator@sha256:eeb387096bac9dd17f2a7e48071602ef4e27902204cbe8856c3f04303212d6a6_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:118e76caf2bb91d04091c2e7dc20a163fcb9b218e44fd5f2ca298db669eed059_ppc64le",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:2b0f46c7a7aa9c580d509030054bb5f4a233f9ec38e2c79e7b0c98b9b0f79d96_s390x",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:3eac2479ff615aa8ab099e7b669a98dd6978753b7dc51582fe899ac756ae18f4_arm64",
            "9Base-RHBK-26.6:rhbk/keycloak-rhel9@sha256:7711b8114aef173846b601a776d85640832b371421c57b6506e5df334ed96dd6_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "keycloak-services: keycloak-services: JWT Bearer authorization grant does not enforce consentRequired"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.