Red Hat build of Keycloak 26.6.6 vulnerabilities

2 known vulnerabilities in Red Hat build of Keycloak 26.6.6 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Red Hat build of Keycloak 26.6: Predictable from Observable State

  CVE-2026-15571Aug 18, 2026Red Hat

  A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that

• 9.1 Critical severity

  Red Hat build of Keycloak 26.4: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-18963Aug 18, 2026Red HatEPSS 8.09%

  A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for an