Search: CVE-2026-19607

CVE-2026-19607 is a medium severity vulnerability in the Red Hat build of Keycloak 26.4 that affects the first-broker-login flow. An attacker can register a matching username on an external identity provider, causing a username collision in Keycloak and locking out the legitimate user from their account. Red Hat has released updated Keycloak images (26.4.16 and 26.6.7) that address this issue among other security fixes.