{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright © Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-7504.json"
      }
    ],
    "title": "org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak",
    "tracking": {
      "current_release_date": "2026-06-30T03:41:34+00:00",
      "generator": {
        "date": "2026-06-30T03:41:34+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.0"
        }
      },
      "id": "CVE-2026-7504",
      "initial_release_date": "2026-05-19T10:52:12.777000+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T10:52:12.777000+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T12:01:12+00:00",
          "number": "2",
          "summary": "Current version"
        },
        {
          "date": "2026-06-30T03:41:34+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.2",
                "product": {
                  "name": "Red Hat build of Keycloak 26.2",
                  "product_id": "9Base-RHBK-26.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.2::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4.12",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4.12",
                  "product_id": "Red Hat build of Keycloak 26.4.12",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.4",
                "product": {
                  "name": "Red Hat build of Keycloak 26.4",
                  "product_id": "9Base-RHBK-26.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.4::el9"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat build of Keycloak 26.2.16",
                "product": {
                  "name": "Red Hat build of Keycloak 26.2.16",
                  "product_id": "Red Hat build of Keycloak 26.2.16",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:build_keycloak:26.2::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat build of Keycloak"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c?arch=arm64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5?arch=ppc64le&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.2.16-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                  "product_id": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                "product": {
                  "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                  "product_id": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-operator-bundle&tag=26.4.12-1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d?arch=amd64&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.2-21"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                  "product_id": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9&tag=26.4-17"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                "product": {
                  "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                  "product_id": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72?arch=s390x&repository_url=registry.redhat.io/rhbk/keycloak-rhel9-operator&tag=26.4-17"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64 as a component of Red Hat build of Keycloak 26.2",
          "product_id": "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64"
        },
        "product_reference": "rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64 as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le as a component of Red Hat build of Keycloak 26.4",
          "product_id": "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le"
        },
        "product_reference": "rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
        "relates_to_product_reference": "9Base-RHBK-26.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "João Mendes",
            "Duarte Antunes"
          ],
          "organization": "Intapp"
        }
      ],
      "cve": "CVE-2026-7504",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site ('Open Redirect')"
      },
      "discovery_date": "2026-04-30T14:46:59.812530+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2464128"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentially leading to the exposure of sensitive information within the domain or facilitating further attacks. This vulnerability specifically affects Keycloak clients configured with a wildcard (*) in the \"Valid Redirect URIs\" field and requires user interaction to be successfully exploited.\n\nThe issue stems from a discrepancy in how Keycloak and the underlying Java URI implementation handle the user-info component of a URL. If a malicious redirect URL is constructed using multiple @ characters in the user-info section, Java's URI parser fails to extract the user-info, leaving only the raw authority field. Consequently, Keycloak's validation check fails to detect the malformed user-info, falls back to a wildcard comparison, and incorrectly permits the malicious redirect.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate impact flaw in Keycloak allows for open redirection when a client is configured with a wildcard in its Valid Redirect URIs. An attacker could craft a malicious URL that, upon user interaction, bypasses validation and redirects to arbitrary locations within the domain, potentially leading to information disclosure or further attacks. This issue specifically affects deployments where clients utilize wildcard redirect URIs, requiring a specific configuration and user engagement for exploitation.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
          "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
          "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
          "Red Hat build of Keycloak 26.2.16",
          "Red Hat build of Keycloak 26.4.12"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-7504"
        },
        {
          "category": "external",
          "summary": "RHBZ#2464128",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2464128"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-7504",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-7504"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-7504",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-7504"
        }
      ],
      "release_date": "2026-05-19T10:52:12.777000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:01+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19595"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:59+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19597"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:33+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.2.16"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19594"
        },
        {
          "category": "vendor_fix",
          "date": "2026-05-20T11:23:18+00:00",
          "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.",
          "product_ids": [
            "Red Hat build of Keycloak 26.4.12"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19596"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, Red Hat recommends avoiding the use of wildcard characters in the \"Valid Redirect URIs\" field for clients within Keycloak. Instead, explicitly list all allowed redirect URIs. Review all client configurations to ensure that wildcards are not used unless absolutely necessary, and if used, ensure that the client application is robust against open redirect vulnerabilities. Changes to client configurations in Keycloak may require a restart or reload of the Keycloak service to take effect, which could impact active user sessions.",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important",
          "product_ids": [
            "9Base-RHBK-26.2:rhbk/keycloak-operator-bundle@sha256:43a89aece29c0a33128e5a7be4ef26d96956fa125df89e22b183c40e50bb8a1d_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:13d8216c9f47a6f73ea6ea5c9ae7b8b38a89c3822e48eeed7271e50970132175_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:4d2cc26a505eda68f7270c8e8a02d794588f9c7ceec98b763d83e3875f957132_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:88672078ac0b5a0da5b72c11751fa7b0c1c57679ec0f68cb1fe9ba76932397b5_arm64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9-operator@sha256:fa9cebe14d003ae002137462fc5833e5634fd040d8f25a66230da9a753891914_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:01a56463ad6790cf448e66f59a81c229db4159f42e563a13d19de051ec85ca86_s390x",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:58e692074e695bee04981aff9641db8070ba1a49ee6134fcc008046cd84da21d_ppc64le",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:7861ca2441bed95aab1ad43f9159d5c60b522fe3f43833f1847bd1d3ddef94d3_amd64",
            "9Base-RHBK-26.2:rhbk/keycloak-rhel9@sha256:a9aeb0bc33a3461fe2d407896422719b21b184717956cbcebac0da976a220c1c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-operator-bundle@sha256:15286c44c4003e787b0bdf9a0bbc5083a2f2312eaf29ccd0c6943232ff52d729_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:2a81955051fb0975bfcb77d25ed64c84038d3c7293f910aeb88f9241be531f9d_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d8185614aa82117680351c710a5d7b80703a9d450dd02a7becfd1405cbc5ecd5_ppc64le",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:d915c75947df63aed99031401dbf570181dba3c5a484eb88438a27892eb7aa72_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9-operator@sha256:f80c9568ff4b3cc086b7107c8e68db5f548c2b51a01dd8c79d0c9705574a180c_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:554cd90241225b6d64d0e7ada9a8ab50ae2054efdb2f5b2cbdb721475ea296df_arm64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:68b61a98fcdfd46a166cabe097d609d65fd51181860f9ec7f691bbe5d2a986db_s390x",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:81773a34d38a8df4b07344fe4ba5670d18684b3579c9d2cf8d0690bf5ec5ab40_amd64",
            "9Base-RHBK-26.4:rhbk/keycloak-rhel9@sha256:fa7342d82f080bfe8ffaaf5ba204b98dc435897a388b1501d23a1541fe7f1272_ppc64le",
            "Red Hat build of Keycloak 26.2.16",
            "Red Hat build of Keycloak 26.4.12"
          ]
        }
      ],
      "title": "org.keycloak/keycloak-services: Open redirect when using wildcard valid redirect URIs in Keycloak"
    }
  ]
}