{"schema_version":1,"title":"Redhat Build Of Keycloak vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 3 vulnerabilities in Redhat Build Of Keycloak: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-4325, was published on 2 April 2026.","url":"https://junglewise.ai/threats/technologies/redhat-build-of-keycloak","json_url":"https://junglewise.ai/threats/technologies/redhat-build-of-keycloak.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/redhat-build-of-keycloak","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":3,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":3},"latest":[{"cve":"CVE-2026-4325","cvss":5.3,"epss":0.0025,"slug":"cve-2026-4325-keycloak-replay-of-action-tokens-via-improper-handling-of-single","title":"Keycloak: Replay of action tokens via improper handling of single-use entries","severity":"medium","exploited":false,"published_at":"2026-04-02T13:16:26.863+00:00","url":"https://junglewise.ai/threats/cve-2026-4325-keycloak-replay-of-action-tokens-via-improper-handling-of-single"},{"cve":"CVE-2026-4633","cvss":3.7,"epss":0.0038,"slug":"cve-2026-4633-keycloak-user-enumeration-in-identity-first-login-flow","title":"Keycloak user enumeration in identity-first login flow","severity":"low","exploited":false,"published_at":"2026-03-23T11:16:25.053+00:00","url":"https://junglewise.ai/threats/cve-2026-4633-keycloak-user-enumeration-in-identity-first-login-flow"},{"cve":"CVE-2026-4628","cvss":4.3,"epss":0.0028,"slug":"cve-2026-4628-keycloak-improper-access-control-in-uma-resource-set-endpoint","title":"Keycloak improper access control in UMA resource_set endpoint","severity":"medium","exploited":false,"published_at":"2026-03-23T09:16:26.14+00:00","url":"https://junglewise.ai/threats/cve-2026-4628-keycloak-improper-access-control-in-uma-resource-set-endpoint"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Redhat Enterprise Linux","slug":"enterprise-linux","vulnerabilities":50,"url":"https://junglewise.ai/threats/technologies/enterprise-linux"},{"name":"Redhat Linux","slug":"linux","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/linux"},{"name":"Redhat Openshift Container Platform","slug":"openshift-container-platform","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/openshift-container-platform"},{"name":"Redhat 389 Directory Server","slug":"389-directory-server","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/389-directory-server"},{"name":"Redhat Hardened Images","slug":"hardened-images","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/hardened-images"},{"name":"Redhat Quay","slug":"quay","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/quay"},{"name":"Redhat Advanced Cluster Management For Kubernetes","slug":"advanced-cluster-management-for-kubernetes","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/advanced-cluster-management-for-kubernetes"},{"name":"Redhat Ansible Automation Platform","slug":"ansible-automation-platform","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ansible-automation-platform"},{"name":"Redhat Insights-Client","slug":"insights-client","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/insights-client"},{"name":"Redhat Ansible Developer","slug":"ansible-developer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-developer"},{"name":"Redhat Ansible Inside","slug":"ansible-inside","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ansible-inside"},{"name":"Redhat Enterprise Linux Desktop","slug":"enterprise-linux-desktop","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/enterprise-linux-desktop"}],"technology":{"hub":true,"name":"Redhat Build Of Keycloak","slug":"redhat-build-of-keycloak","vendor":{"hub":true,"name":"Redhat","slug":"redhat","url":"https://junglewise.ai/threats/vendors/redhat"},"aliases":[],"description":"Red Hat's distribution and build of Keycloak, an open-source identity and access management platform.","url":"https://junglewise.ai/threats/technologies/redhat-build-of-keycloak"},"most_severe":[{"cve":"CVE-2026-4325","cvss":5.3,"epss":0.0025,"slug":"cve-2026-4325-keycloak-replay-of-action-tokens-via-improper-handling-of-single","title":"Keycloak: Replay of action tokens via improper handling of single-use entries","severity":"medium","exploited":false,"published_at":"2026-04-02T13:16:26.863+00:00","url":"https://junglewise.ai/threats/cve-2026-4325-keycloak-replay-of-action-tokens-via-improper-handling-of-single"},{"cve":"CVE-2026-4628","cvss":4.3,"epss":0.0028,"slug":"cve-2026-4628-keycloak-improper-access-control-in-uma-resource-set-endpoint","title":"Keycloak improper access control in UMA resource_set endpoint","severity":"medium","exploited":false,"published_at":"2026-03-23T09:16:26.14+00:00","url":"https://junglewise.ai/threats/cve-2026-4628-keycloak-improper-access-control-in-uma-resource-set-endpoint"},{"cve":"CVE-2026-4633","cvss":3.7,"epss":0.0038,"slug":"cve-2026-4633-keycloak-user-enumeration-in-identity-first-login-flow","title":"Keycloak user enumeration in identity-first login flow","severity":"low","exploited":false,"published_at":"2026-03-23T11:16:25.053+00:00","url":"https://junglewise.ai/threats/cve-2026-4633-keycloak-user-enumeration-in-identity-first-login-flow"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}