Red Hat Rhbk 26.0.8 vulnerabilities

2 CVEs affecting Red Hat Rhbk 26.0.8, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-11736, published 2025-01-14.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-11734, published 2025-01-14. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of…
• CVE-2024-11736, published 2025-01-14. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Keycloak. Admin users may have to access sensitive server environment variables and system properties through user-configurable URLs. When configuring backchannel logout…