Red Hat Red Hat Single Sign-On 7.6.13
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-7507 | | Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover | HIGH 7.5 | 0.8 % | ||
| CVE-2026-7307 | | Keycloak: keycloak: denial of service via specially crafted saml input | HIGH 7.5 | 0.9 % | ||
| CVE-2026-4634 | | Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters | HIGH 7.5 | 0.6 % | ||
| CVE-2026-2575 | | Keycloak: keycloak: denial of service due to excessive samlrequest decompression | MEDIUM 5.3 | 0.6 % | ||
| CVE-2026-2092 | | Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions | HIGH 7.7 | 0.4 % | ||
| CVE-2026-0603 | | Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection | HIGH 8.3 | 1.0 % | ||
| CVE-2025-12543 | | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf | CRITICAL 9.6 | 1.3 % | ||
| CVE-2025-9784 | | Undertow: undertow madeyoureset http/2 ddos vulnerability | HIGH 7.5 | 2.3 % |