CVE Tools
Track your stack

Red Hat Single Sign-on 7.6 For Rhel 7

33 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Red Hat Single Sign-on 7.6 For Rhel 7, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Red Hat Single Sign-on 7.6 For Rhel 7 CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Red Hat Single Sign-on 7.6 For Rhel 7 CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-091
2025-100
2025-110
2025-120
2026-012
2026-020
2026-032
2026-041
2026-052
2026-060
2026-070
2026-082
2026-090
2026-100
2026-110

Severity

How the 33 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical26%
  • High1855%
  • Medium1133%
  • Low26%

Latest CVEs

The 15 most recently published vulnerabilities affecting Red Hat Single Sign-on 7.6 For Rhel 7.

  1. CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass9.1
  2. CVE-2026-15563Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos7.4
  3. CVE-2026-7507Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover7.5
  4. CVE-2026-7307Keycloak: keycloak: denial of service via specially crafted saml input7.5
  5. CVE-2026-4634Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters7.5
  6. CVE-2026-2575Keycloak: keycloak: denial of service due to excessive samlrequest decompression5.3
  7. CVE-2026-2092Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions7.7
  8. CVE-2026-0603Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection8.3
  9. CVE-2025-12543Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6
  10. CVE-2025-9784Undertow: undertow madeyoureset http/2 ddos vulnerability7.5
  11. CVE-2024-10234Wildfly: wildfly vulnerable to cross-site scripting (xss)6.1
  12. CVE-2024-8883Keycloak: vulnerable redirect uri validation results in open redirec6.1
  13. CVE-2024-8698Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak7.7
  14. CVE-2024-7341Wildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters7.1
  15. CVE-2024-4629Keycloak: potential bypass of brute force protection6.5

Product grouping is registry-driven, with AI assist and human review. How it works