CVE-2026-1609

概要

参考情報

• access.redhat.com/security/cve/CVE-2026-1609 · Vendor Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• keycloak/keycloak · Issue Tracking
• keycloak/keycloak release 26.5.3 · Release Notes
• security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1609.json · Vendor Advisory

build of keycloak のその他の脆弱性

• CVE-2026-16442緊急 9.8A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue oc…
• CVE-2026-15572高 8.8A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management. The "Allowed Protocol Mapper Types" policy, whi…
• CVE-2026-16102高 8.1A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR…
• CVE-2026-16100中 6.5A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from faile…
• CVE-2026-16071中 5.4A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue oc…