This advisory covers multiple security fixes in Red Hat build of Keycloak 26.4.10, an integrated sign-on solution for OpenShift. Vulnerabilities addressed include authentication bypasses due to disabled SAML clients and identity providers (CVE-2026-3047, CVE-2026-3009, CVE-2026-2603), improper validation of encrypted SAML assertions allowing unauthorized access (CVE-2026-2092), missing checks on disabled clients for Docker Registry Protocol (CVE-2026-2733), denial of service caused by excessive SAMLRequest decompression (CVE-2026-2575), response delays due to unchecked NotOnOrAfter in SubjectConfirmationData (CVE-2026-1190), and potential security control bypass via authorization header parsing (CVE-2026-0707). These vulnerabilities impact authentication and authorization mechanisms within Keycloak, potentially allowing attackers to bypass security controls or cause service disruption. The advisory provides updated container images for affected versions to remediate these issues.

The vulnerabilities collectively allow for authentication bypasses, unauthorized access, denial of service, and potential security control bypass within the Keycloak authentication server. Exploitation could lead to unauthorized user authentication, bypassing disabled identity providers or clients, and denial of service conditions affecting availability. These issues compromise the integrity and availability of authentication services managed by Keycloak in OpenShift environments.

Red Hat has released updated images for Red Hat build of Keycloak 26.4.10 that address these vulnerabilities. Users should back up existing installations and apply the updated Keycloak 26.4.10 images as provided by Red Hat to remediate these security issues. No alternative mitigations or workarounds are specified; applying the update is the recommended course of action.