Is Keycloak 26.8.2 affected?

Nov 5, 2026 · Release notes ↗

CVSS 7.4

1 known vulnerability affects 26.8.2 (highest CVSS 7.4).

26.8.2 is the latest release of its track.

Vulnerabilities affecting 26.8.2

7.4
CVE-2026-16443 Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation fixed in 26.37.1