UnratedFix available
Keycloak 26.7.5
Type: patchSources: Keycloak
Keycloak 26.7.5 lists multiple security fixes, including fixes for authentication bypasses, information disclosure, and other security issues.
- Products
- Keycloak
- Affected versions
- Not specified
- Fixed versions
- 26.7.5
- CVEs
- CVE-2025-66021, CVE-2026-13505, CVE-2026-16103, CVE-2026-18203, CVE-2026-18206, CVE-2026-18207, CVE-2026-18208, CVE-2026-18211, CVE-2026-18217, CVE-2026-84939, CVE-2026-8798, CVE-2026-88770, CVE-2026-89298, CVE-2026-93999, CVE-2026-9798
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 22:53 UTC · Revision 1
Source evidence
Keycloak 26.7.5 lists multiple security fixes, including fixes for authentication bypasses, information disclosure, and other security issues.
Release notes from keycloak 26.7.5 Upgrading
Keycloak
Fixed versions: 26.7.5
Complete source record
{
"id": "f5b37959d403e4ba942fe1e91f5fcb2d58f23ee65a6a01ffb3e804d6126210a5",
"url": "https://github.com/keycloak/keycloak/releases/tag/26.7.5",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Keycloak 26.7.5",
"summary": "Keycloak 26.7.5 lists multiple security fixes, including fixes for authentication bypasses, information disclosure, and other security issues.",
"evidence": "Release notes from keycloak\n26.7.5\n\nUpgrading",
"products": [
{
"name": {
"value": "Keycloak",
"evidence": "Keycloak 26.7.2: token-exchange refresh continues issuing tokens for a disabled audience client"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "26.7.5",
"evidence": "Release notes from keycloak\n26.7.5"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-16103",
"evidence": "[CVE-2026-16103]"
},
{
"value": "CVE-2026-9798",
"evidence": "CVE-2026-9798"
},
{
"value": "CVE-2026-18206",
"evidence": "[CVE-2026-18206]"
},
{
"value": "CVE-2026-18203",
"evidence": "[CVE-2026-18203]"
},
{
"value": "CVE-2026-18207",
"evidence": "[CVE-2026-18207]"
},
{
"value": "CVE-2026-18208",
"evidence": "[CVE-2026-18208]"
},
{
"value": "CVE-2026-18211",
"evidence": "[CVE-2026-18211]"
},
{
"value": "CVE-2026-18217",
"evidence": "[CVE-2026-18217]"
},
{
"value": "CVE-2025-66021",
"evidence": "CVE-2025-66021"
},
{
"value": "CVE-2026-89298",
"evidence": "[CVE-2026-89298]"
},
{
"value": "CVE-2026-88770",
"evidence": "[CVE-2026-88770]"
},
{
"value": "CVE-2026-84939",
"evidence": "CVE-2026-84939"
},
{
"value": "CVE-2026-8798",
"evidence": "CVE-2026-8798"
},
{
"value": "CVE-2026-13505",
"evidence": "CVE-2026-13505"
},
{
"value": "CVE-2026-93999",
"evidence": "[CVE-2026-93999]"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-keycloak-keycloak",
"document_id": 21519,
"published_at": "2026-09-30T18:11:25+00:00"
}