RHSA-2026:96040: Important: Red Hat build of Keycloak 26.6.9 Security Update
Published Nov 7, 2026
·Updated
Important: Red Hat build of Keycloak 26.6.9 Security Update
Other sources
Red Hat build of Keycloak 26.6.9 is a standalone server, based onthe Keycloak project, that provides authentication andstandards-based single sign-on capabilities for web and mobileapplications.Security fixes: SAML redirect binding signature bypass via percent-encoded parameter names (CVE-2026-117691)
— Red Hat
Affected Software
1 affected component
Red Hat Red Hat build of Keycloak
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Red Hat build of Keycloakto a version that resolves this vulnerability.Fixed in 26.6.9 - Operational
Before applying the update, back up the existing installation, including all applications, configuration files, databases, and database settings.
Event History
Nov 7, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·02:46 PM
Data Sourced
via Red Hat·02:46 PM
Severity