Red Hat Red Hat build of Keycloak 26.2.13

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-14778Keycloak: incorrect ownership checks in /uma-policy/MEDIUM 5.40.3 %
CVE-2026-1529Org.keycloak.services.resources.organizations: keycloak: unauthorized organization registration via improper invitation token validationHIGH 8.10.5 %