Package · Maven

org.keycloak:keycloak-rest-admin-ui-ext

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.9

CVE-2026-11986

Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings…

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat build of Keycloak 26.6 Red Hat build of Keycloak 26.6.5 Wolfi Maven

Jun 11, 2026