Red Hat build of Keycloak 26.0.16 vulnerabilities

1 known vulnerability in Red Hat build of Keycloak 26.0.16 from Red Hat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat build of Keycloak 26.0: Allocation of Resources Without Limits or Throttling

  CVE-2025-11419Dec 23, 2025Red Hat

  A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailab