Is Keycloak 26.5.2 affected?

Vulnerabilities affecting 26.5.2

• 8.8
  CVE-2026-15572 Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy bypass allows privilege escalation fixed in 26.6.5
• 8.1
  CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher fixed in 26.6.5
• 8.1
  CVE-2026-16102 Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers fixed in 26.6.5
• 8.1
  CVE-2026-9800 Authorization bypass via incorrect uri comparison fixed in 26.6.4
• 8.1
  CVE-2026-11800 Authentication bypass via jwt algorithm confusion fixed in 26.6.4
• 7.7
  CVE-2026-9099 group-admin escalation to realm-admin fixed in 26.6.4
• 7.7
  CVE-2026-2092 Keycloak: Unauthorized access via improper validation of encrypted SAML assertions fixed in 26.5.5
• 7.4
  CVE-2026-16442 Keycloak-services: keycloak-services: saml idp-initiated broker login bypasses link-only restriction fixed in 26.6.5
• 7.4
  CVE-2026-16443 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation fixed in 26.6.5
• 7.3
  CVE-2026-9086 Cross-site scripting (xss) via case-insensitive uri validation bypass fixed in 26.6.4
• 7.3
  CVE-2026-9795 Privilege escalation via improper scope mapping enforcement fixed in 26.6.4
• 6.5
  CVE-2026-16100 Keycloak-services: keycloak-services: unbounded metric cardinality in user event metrics via request-controlled error text fixed in 26.6.5
• 6.5
  CVE-2026-9705 Attacker can re-enable and take over disabled clients via registration access token fixed in 26.6.4
• 5.4
  CVE-2026-16071 Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary fixed in 26.6.5
• 4.9
  CVE-2026-9083 Information disclosure through arbitrary filesystem path probing fixed in 26.6.4
• 4.6
  CVE-2026-9799 Unauthorized access to resources via uma permission ticket bypass fixed in 26.6.4

Newer releases