Red Hat build of Keycloak
Red Hat build of Keycloak is a cloud-native Identity Access Management solution based on the popular open source Keycloak project. Red Hat build of Keycloak replaces any planned future releases of Red Hat Single Sign-On. You can migrate Red Hat Single Sign-On to Red Hat build of Keycloak now.
Browse the latest documentation
Latest security advisories
| Severity | Advisory/CVE | Synopsis | Date |
|---|---|---|---|
| Severity Critical | Advisory/CVE(RHSA-2026:56524) Critical: Red Hat build of Keycloak 26.6.6 Images Security Update | Synopsis Critical: Red Hat build of Keycloak 26.6.6 Images Security Update | Date |
| Severity Critical | Advisory/CVE(RHSA-2026:56523) Critical: Red Hat build of Keycloak 26.6.6 Security Update | Synopsis Critical: Red Hat build of Keycloak 26.6.6 Security Update | Date |
| Severity Critical | Advisory/CVE(RHSA-2026:56520) Critical: Red Hat build of Keycloak 26.4.15 Security Update | Synopsis Critical: Red Hat build of Keycloak 26.4.15 Security Update | Date |
| Severity Critical | Advisory/CVE(RHSA-2026:56519) Critical: Red Hat build of Keycloak 26.4.15 Images Security Update | Synopsis Critical: Red Hat build of Keycloak 26.4.15 Images Security Update | Date |
| Severity Important | Advisory/CVECVE-2026-15571 | Synopsis A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC client. By tricking a user into authenticating, an attacker-controlled client can forge a valid linking URL to connect the victim's account to an attacker's external identity. This results in a full account takeover, allowing the attacker to log in as the victim. | Date |
Top resources
Knowledgebase
Access articles and solutions to find answers to your questions.
Troubleshooting
Connect to the right information to self-solve issues quickly and efficiently.
Supported configurations
Red Hat provides both production and development support for supported configurations and tested integrations.
Component details
Component details for each release of Red Hat build of Keycloak.
Get support
Support cases
Get answers quickly by opening a support case with us.
Live chat
Directly access our support engineers during weekday business hours.
Call or email
Speak directly with a Red Hat Support expert by phone or through email.
