Package · Maven

org.keycloak:keycloak-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.5

CVE-2026-9796

Keycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability

A flaw was found in Keycloak. An authenticated administrator with the `manage-clients` role can exploit a Time-of-check to time-of-use (TOCTOU) vulnerability in the name-based admin role checks. This allows the attacker to escalate their privileges to `realm-…

Red Hat Red Hat build of Keycloak 26.6 Red Hat Build of Keycloak Red Hat build of Keycloak 26.6.6 Maven

May 28, 2026