CVE-2026-18201: Red Hat Build Of Keycloak

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that organization. This could allow an unauthorized administrator to influence how users log into specific organizations.

Affected products

• Red Hat Build Of Keycloak: affected versions not specified

Published 2026-07-29. Last modified 2026-09-16.