platform
Keycloak: security advisories, deprecations and releases
Open-source identity and access management.
- Items, 90 days
- 5
- Critical
- 1
- Last critical
- 31 days ago
- This week
- 0
Security 1
- CRITICAL Keycloak Blog · 3 Oct 2026
CVE-2026-12388 IdP mapper escalation
IdP mapper admin role escalation via identity brokering fixed in 26.8.0.
CVE-2026-12388
Deprecations 1
- HIGH ACT BY 1 OCT 2026 endoflife.date · 3 Oct 2026
Keycloak 26.7 has reached end of life
Keycloak 26.7 reached end of life on 2026-10-01, as listed by endoflife.date.
Releases 3
- HIGH Keycloak Blog · 13 Oct 2026
Keycloak 26.8.1 released
Keycloak 26.8.1 contains 21 security fixes and numerous bug fixes. Upgrade recommended for all deployments.
CVE-2026-101333CVE-2026-103884CVE-2026-15943CVE-2026-18569CVE-2026-82968CVE-2026-91777CVE-2026-94000CVE-2026-94001CVE-2026-94213CVE-2026-94215CVE-2026-94217CVE-2026-94218CVE-2026-95503CVE-2026-96445CVE-2026-96446CVE-2026-97177CVE-2026-97311CVE-2026-97846 - INFO endoflife.date · 3 Oct 2026
Keycloak 26.8 released
Keycloak 26.8 was released on 2026-10-01.
- HIGH ACT BY 30 SEPT 2026 Keycloak Blog · 3 Oct 2026
Keycloak 26.7.5 released
Keycloak 26.7.5 patches multiple security vulnerabilities, fixes bugs, and upgrades Quarkus. Upgrade recommended for all deployments.
CVE-2025-66021CVE-2026-13505CVE-2026-16103CVE-2026-18203CVE-2026-18206CVE-2026-18207CVE-2026-18208CVE-2026-18211CVE-2026-18217CVE-2026-84939CVE-2026-8798CVE-2026-88770CVE-2026-89298CVE-2026-93999
Only hear about Keycloak when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.