Red Hat Product Errata RHSA-2026:56520 - Security Advisory
Issued:
2026-08-18
Updated:
2026-08-18

RHSA-2026:56520 - Security Advisory

Synopsis

Critical: Red Hat build of Keycloak 26.4.15 Security Update

Type/Severity

Security Advisory: Critical

Topic

New Red Hat build of Keycloak 26.4.15 packages are available from the Customer Portal

Description

Red Hat build of Keycloak 26.4.15 is a standalone server, based on
the Keycloak project, that provides authentication and
standards-based single sign-on capabilities for web and mobile
applications.

Security fixes:

  • Unauthenticated account takeover via reset-credentials flow bypass (CVE-2026-18963)

Solution

Before applying the update, back up your existing installation,
including all applications, configuration files, databases and
database settings, and so on.

Affected Products

  • Red Hat build of Keycloak Text-only Advisories x86_64

Fixes

(none)

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.