What’s Vulnerable › Products

Red Hat Single Sign-On 7.6 for RHEL 9 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Red Hat Single Sign-On 7.6 for RHEL 9 version is affected

Latest Red Hat Single Sign-On 7.6 for RHEL 9 vulnerabilities

• CVE-2026-15563 — Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos (CVSS 7.4)
• CVE-2026-0603 — Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection (CVSS 8.3)
• CVE-2024-8698 — Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak (CVSS 7.7)
• CVE-2024-5967 — Keycloak: leak of configured ldap bind credentials through the keycloak admin console (CVSS 2.7)
• CVE-2024-4540 — Keycloak: exposure of sensitive information in pushed authorization requests (par) kc_restart cookie (CVSS 7.5)
• CVE-2023-6544 — Keycloak: authorization bypass (CVSS 5.4)
• CVE-2023-6484 — Keycloak: log injection during webauthn authentication or registration (CVSS 5.3)
• CVE-2024-1249 — Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos (CVSS 7.4)