RHSA-2026:76128: rh-sso7-keycloak Red Hat

CVSS: 9.6v3.1CriticalPublished

Published 07-10-2026Last modified 19-10-2026

Open JSON

Vulnerability summary

RHSA-2026:76128 is a critical (CVSS 9.6) vulnerability in rh-sso7-keycloak Red Hat.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.6/10

010

Critical · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

07-10-2026
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.13 security update on RHEL 7

CVSS metrics

1 score · 1 source · 1 version

v3.19.6

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat2 products

rh-sso7-keycloak< 0:18.0.20-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server< 0:18.0.20-1.redhat_00001.1.el7sso

1 vendor · 2 products

References

145 links

Show all 100 references

kb.cert.org/vuls/id/767506ARTICLE
access.redhat.com/security/cve/CVE-2025-12543REPORT
bugzilla.redhat.com/show_bug.cgi?id=2408784REPORT
www.cve.org/CVERecord?id=CVE-2025-12543Advisory
nvd.nist.gov/vuln/detail/CVE-2025-12543Advisory
access.redhat.com/security/cve/CVE-2025-14813REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458640REPORT
www.cve.org/CVERecord?id=CVE-2025-14813Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14813Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%9014813ARTICLE
access.redhat.com/security/cve/CVE-2026-0603REPORT
bugzilla.redhat.com/show_bug.cgi?id=2427147REPORT
www.cve.org/CVERecord?id=CVE-2026-0603Advisory
nvd.nist.gov/vuln/detail/CVE-2026-0603Advisory
access.redhat.com/security/cve/CVE-2026-2092REPORT
bugzilla.redhat.com/show_bug.cgi?id=2437296REPORT
www.cve.org/CVERecord?id=CVE-2026-2092Advisory
nvd.nist.gov/vuln/detail/CVE-2026-2092Advisory
access.redhat.com/security/cve/CVE-2026-2575REPORT
bugzilla.redhat.com/show_bug.cgi?id=2440149REPORT
www.cve.org/CVERecord?id=CVE-2026-2575Advisory
nvd.nist.gov/vuln/detail/CVE-2026-2575Advisory
access.redhat.com/security/cve/CVE-2026-3505REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458638REPORT
www.cve.org/CVERecord?id=CVE-2026-3505Advisory
nvd.nist.gov/vuln/detail/CVE-2026-3505Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%903505ARTICLE
access.redhat.com/security/cve/CVE-2026-4634REPORT
bugzilla.redhat.com/show_bug.cgi?id=2450250REPORT
www.cve.org/CVERecord?id=CVE-2026-4634Advisory
nvd.nist.gov/vuln/detail/CVE-2026-4634Advisory
access.redhat.com/security/cve/CVE-2026-5588REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458634REPORT
www.cve.org/CVERecord?id=CVE-2026-5588Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5588Advisory
github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588ARTICLE
access.redhat.com/security/cve/CVE-2026-7307REPORT
bugzilla.redhat.com/show_bug.cgi?id=2476526REPORT
www.cve.org/CVERecord?id=CVE-2026-7307Advisory
nvd.nist.gov/vuln/detail/CVE-2026-7307Advisory
access.redhat.com/security/cve/CVE-2026-7507REPORT
bugzilla.redhat.com/show_bug.cgi?id=2464145REPORT
www.cve.org/CVERecord?id=CVE-2026-7507Advisory
nvd.nist.gov/vuln/detail/CVE-2026-7507Advisory
access.redhat.com/security/cve/CVE-2026-15563REPORT
bugzilla.redhat.com/show_bug.cgi?id=2483138REPORT
www.cve.org/CVERecord?id=CVE-2026-15563Advisory
nvd.nist.gov/vuln/detail/CVE-2026-15563Advisory
access.redhat.com/security/cve/CVE-2026-42578REPORT
bugzilla.redhat.com/show_bug.cgi?id=2477226REPORT
www.cve.org/CVERecord?id=CVE-2026-42578Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42578Advisory
github.com/netty/netty/security/advisories/GHSA-45q3-82m4-75jrARTICLE
access.redhat.com/security/cve/CVE-2026-42579REPORT
bugzilla.redhat.com/show_bug.cgi?id=2477217REPORT
www.cve.org/CVERecord?id=CVE-2026-42579Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42579Advisory
github.com/netty/netty/security/advisories/GHSA-cm33-6792-r9fmARTICLE
access.redhat.com/security/cve/CVE-2026-42581REPORT
bugzilla.redhat.com/show_bug.cgi?id=2477232REPORT
www.cve.org/CVERecord?id=CVE-2026-42581Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42581Advisory
github.com/netty/netty/security/advisories/GHSA-xxqh-mfjm-7mv9ARTICLE
access.redhat.com/security/cve/CVE-2026-42587REPORT
bugzilla.redhat.com/show_bug.cgi?id=2477220REPORT
www.cve.org/CVERecord?id=CVE-2026-42587Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42587Advisory
github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwvARTICLE
access.redhat.com/security/cve/CVE-2026-44249REPORT
bugzilla.redhat.com/show_bug.cgi?id=2488081REPORT
www.cve.org/CVERecord?id=CVE-2026-44249Advisory
nvd.nist.gov/vuln/detail/CVE-2026-44249Advisory
github.com/netty/netty/releases/tag/netty-4.1.135.FinalARTICLE
github.com/netty/netty/releases/tag/netty-4.2.15.FinalARTICLE
github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86ARTICLE
access.redhat.com/security/cve/CVE-2026-44893REPORT
bugzilla.redhat.com/show_bug.cgi?id=2488383REPORT
www.cve.org/CVERecord?id=CVE-2026-44893Advisory
nvd.nist.gov/vuln/detail/CVE-2026-44893Advisory
github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfvARTICLE
access.redhat.com/security/cve/CVE-2026-45416REPORT
bugzilla.redhat.com/show_bug.cgi?id=2488391REPORT
www.cve.org/CVERecord?id=CVE-2026-45416Advisory
nvd.nist.gov/vuln/detail/CVE-2026-45416Advisory
github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmhARTICLE
access.redhat.com/security/cve/CVE-2026-45674REPORT
bugzilla.redhat.com/show_bug.cgi?id=2488400REPORT
www.cve.org/CVERecord?id=CVE-2026-45674Advisory
nvd.nist.gov/vuln/detail/CVE-2026-45674Advisory
github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vcARTICLE

Showing 100 of 145. Use Open JSON for the complete list.