VDB
CVE-2026-37977
CVE-2026-37977
PUBLISHED
Keycloak ermöglicht Single Sign-On mit Identity and Access Management für moderne Anwendungen und Dienste.
EPSS 0.25% · 16.5th percentile
Risk Scores
EPSS Score
0.25%
16.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux | |
| Open Source | Open Source Keycloak <26.6.3 | |
| Open Source | Open Source Keycloak |
Timeline
- Apr 6, 2026 CVE Published
- Apr 6, 2026 EPSS Score
- Apr 6, 2026 PoC Published
- Apr 6, 2026 Security Advisory
- Apr 8, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0970.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0970 advisory
- https://github.com/advisories/GHSA-5v8v-xvjv-57x7 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2455324 advisory
- https://www.keycloak.org/2026/06/keycloak-2663-released advisory
- https://access.redhat.com/errata/RHSA-2026:25097 advisory
- https://access.redhat.com/errata/RHSA-2026:25098 advisory
- https://access.redhat.com/errata/RHSA-2026:30050 advisory
- https://access.redhat.com/errata/RHSA-2026:30084 advisory
- https://access.redhat.com/errata/RHSA-2026:30083 advisory
- https://access.redhat.com/errata/RHSA-2026:30049 advisory