Red Hat Red Hat build of Keycloak 26.2.9

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-10044Keycloak: keycloak error_description injection on error pagesMEDIUM 4.30.3 %
CVE-2025-9162Org.keycloak/keycloak-model-storage-service: variable injection into environment variablesMEDIUM 4.90.5 %